embtrace-check

Free CRA Readiness Check collector — one command in your project folder, and within 24 hours you receive a report showing where your product stands with the EU Cyber Resilience Act: traffic-light readiness status, your full component inventory, and known vulnerabilities with severity.

This collector is open source for one reason: so you can verify exactly what leaves your machine.

What it transmits — and what it never does

Transmitted (JSON, ~a few kB):

  • names, versions and package ecosystems of your dependencies (from lockfiles and build files: Conan, vcpkg, CMake, Cargo, npm/yarn/pnpm, Python, Go, Maven/Gradle, Meson, and more),
  • the project folder name (hash it with --anonymize),
  • scan statistics (number of build files, tool version).

Never transmitted: source code, file paths, file contents, configuration, credentials. See for yourself before sending anything:

embtrace-check . --dry-run     # prints the exact payload, uploads nothing

Usage

  1. Get your free one-time code at https://embtrace.dev/check (the report goes to the e-mail address you register there).
  2. Run the collector in your project folder:
pipx install embtrace-check         # or: pip install embtrace-check,
                                    #     or download the standalone binary
embtrace-check . --code CHK-XXXX-YYYY
  1. Your report arrives within 24 hours. The code is valid for one check.

More options: embtrace-check --help — including --output payload.json for air-gapped environments (send the file by mail) and --with-tools to additionally use native package-manager CLIs for higher-fidelity results.

Exit codes

Code Meaning
0 success
1 error (network, invalid code, …)
2 no components found — declare dependencies manually in embtrace-deps.yaml

Privacy

Data is processed exclusively on Innomatica's own servers in Germany and is never shared or sold. Full notes: https://embtrace.dev/check-privacy.

About

embtrace-check is the free entry point to embtrace — the CRA/NIS2 compliance toolchain for embedded software teams by Innomatica GmbH. The server side (enrichment, vulnerability monitoring, reports) is a commercial product; this repository contains the complete client.

Maintained by Innomatica; the roadmap follows the product. Issues and PRs are welcome — please report security topics per SECURITY.md.

License

MIT © 2026 Innomatica GmbH

Project links

Data verified by PyPI on Jul 28, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.5.0)

Owner

PyPI data
Data sourced directly from PyPI's database.

Credits

PyPI data
Data sourced directly from PyPI's database.

Author: Innomatica GmbH

GitHub Statistics

Data verified by PyPI on Jul 28, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

MIT License (MIT License)

Requires

Python >=3.11

Provides Extra

dev

Tags

compliance cra cyber-resilience-act dependencies embedded sbom

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

embtrace_check-0.1.0.tar.gz (51.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

embtrace_check-0.1.0-py3-none-any.whl (63.7 kB view details)

Uploaded Python 3

File details

Details for the file embtrace_check-0.1.0.tar.gz.

File metadata

  • Download URL: embtrace_check-0.1.0.tar.gz
  • Upload date:
  • Size: 51.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for embtrace_check-0.1.0.tar.gz
Algorithm Hash digest
SHA256 6c3c1b23fe5989493d9a6968da4dfac74c15867b933b02ecbea78fcd4fd28cc3
MD5 b826d2e15677a0ed6a29f7d233953b45
BLAKE2b-256 2bf123c2a1aa905e7d6314ee9f1fcf0442bece4502e132f18de27075c513375f

See more details on using hashes here.

Provenance

The following attestation bundles were made for embtrace_check-0.1.0.tar.gz:

Publisher: publish.yml on Innomatica-GmbH/embtrace-check

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file embtrace_check-0.1.0-py3-none-any.whl.

File metadata

  • Download URL: embtrace_check-0.1.0-py3-none-any.whl
  • Upload date:
  • Size: 63.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for embtrace_check-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 81fd52a83bb12a6c5a15ddc24909c7bf5536b78900399774b6c796cfff3edea2
MD5 1a261f6368cb51453676cc15c073b6e5
BLAKE2b-256 0411088d242ae0da7e2e11f6cf977c5569b20fc61d66398f0d1bccae45fdd810

See more details on using hashes here.

Provenance

The following attestation bundles were made for embtrace_check-0.1.0-py3-none-any.whl:

Publisher: publish.yml on Innomatica-GmbH/embtrace-check

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.5.0

2 files

0.4.0

2 files

0.3.1

2 files

0.3.0

2 files

0.2.0

2 files

This release

0.1.0 This release

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page