20 projects
ossbomer
Profile-driven SBOM validation, conformance, and license policy (SPDX / CycloneDX)
dnsmesh
A federated end-to-end encrypted messaging protocol delivered over DNS
gpgnotes
GPGNotes - A CLI note-taking tool with GPG encryption, tagging, and Git sync
ossbomer-schema
OSSBOMER - SBOM Schema Validator for SPDX and CycloneDX
ossa-scanner
Open Source Software Advisory generator for Core and Base Linux Packages.
ossbomer-oslc
OSSBOMER - Open Source License Compliance verification using Open Source Software Advisories and License SPDX rules.
ossbomer-conformance
OSSBOMER - SBOM Conformance against NTIA, CRA, and other compliance requirements.
13 archived projects
ccda-cli Archived
CLI tool for collecting software supply chain security metrics
semantic-copycat-upmex Archived
Universal Package Metadata Extractor - Extract metadata from various package formats
semantic-copycat-oslili Archived
Semantic Copycat Open Source License Identification Library
semantic-copycat-purl2src Archived
Translate Package URLs (PURLs) into validated download URLs for source code artifacts
semantic-copycat-src2id Archived
Source to ID - Identify package coordinates and repositories from source code using multiple strategies
semantic-copycat-purl2notices Archived
Generate legal notices (attribution to authors and copyrights) for software packages
xmonkey-namonica Archived
Purl2Notices - OSS Attribution Generator
xmonkey-lidy Archived
A XMonkey tool for identifying SPDX licenses.
oslili Archived
Open Source License Identification Library
xmonkey-curator Archived
Automated OSS curation scanner
oslili-cli Archived
Open Source License Identification Library
botsniffer Archived
Detects AI generated code using ML
thundera-bsa Archived
Command Line Interface for ThunderaBSA
