Python library for CycloneDX

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for coderpatros from gravatar.com coderpatros Avatar for CycloneDX from gravatar.com CycloneDX Avatar for jkowalleck from gravatar.com jkowalleck Avatar for madpah from gravatar.com madpah Avatar for sspringett from gravatar.com sspringett

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License (Apache-2.0)
  • Author: Paul Horton
  • Maintainer: Jan Kowalleck
  • Tags CycloneDX, library, OWASP, SCA, Software Bill of Materials, Bill of Materials, BOM, SBOM, VEX, VDR, OBOM, MBOM, SaaSBOM, SPDX, PackageURL, PURL
  • Requires: Python <4.0, >=3.8
  • Provides-Extra: json-validation, validation, xml-validation
Classifiers

Project description

CycloneDX Python Library

shield_pypi-version shield_conda-forge-version shield_rtfd shield_gh-workflow-test shield_coverage shield_ossf-best-practices shield_license
shield_website shield_slack shield_groups shield_twitter-follow

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

This package is not designed for standalone use. It is a software library.

As of version 3.0.0, the internal data model was adjusted to allow CycloneDX VEX documents to be produced as per official examples linking VEX to a separate CycloneDX document.

If you're looking for a CycloneDX tool to run to generate (SBOM) software bill-of-materials documents, why not checkout CycloneDX Python or Jake.

Documentation

View the documentation here.

Python Support

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

Changelog

See our CHANGELOG.

Contributing

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

Copyright & License

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for coderpatros from gravatar.com coderpatros Avatar for CycloneDX from gravatar.com CycloneDX Avatar for jkowalleck from gravatar.com jkowalleck Avatar for madpah from gravatar.com madpah Avatar for sspringett from gravatar.com sspringett

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: Apache Software License (Apache-2.0)
  • Author: Paul Horton
  • Maintainer: Jan Kowalleck
  • Tags CycloneDX, library, OWASP, SCA, Software Bill of Materials, Bill of Materials, BOM, SBOM, VEX, VDR, OBOM, MBOM, SaaSBOM, SPDX, PackageURL, PURL
  • Requires: Python <4.0, >=3.8
  • Provides-Extra: json-validation, validation, xml-validation
Classifiers

Release history Release notifications | RSS feed

8.4.0

8.3.0

8.2.1

8.2.0

8.1.0

8.0.0

8.0.0rc2 pre-release

This version

8.0.0rc1 pre-release

8.0.0a1 pre-release

7.6.2

7.6.1

7.6.0

7.5.1

7.5.0

7.4.1

7.4.0

7.3.4

7.3.3

7.3.2

7.3.1 yanked

Reason this release was yanked:

This version had a flaw with reliable sorting of components, which had downstram implications. Please use version 7.3.2 or later

7.3.0

7.2.0

7.1.0

7.0.0

7.0.0a1 pre-release

6.4.4

6.4.3

6.4.2

6.4.1

6.4.0

6.3.0

6.2.0

6.1.0

6.0.0

6.0.0rc3 pre-release

6.0.0rc2 pre-release

6.0.0rc1 pre-release

5.2.0

5.1.1

5.1.0

5.0.1

5.0.0

5.0.0rc2 pre-release

5.0.0rc1 pre-release

4.2.3

4.2.2

4.2.1

4.2.0

4.1.0

4.0.1

4.0.0

4.0.0rc3 pre-release

4.0.0rc2 pre-release

4.0.0rc1 pre-release

4.0.0rc0 pre-release

3.1.5

3.1.4

3.1.3

3.1.2

3.1.1

3.1.0

3.0.0rc1 pre-release

3.0.0rc0 pre-release

2.7.1

2.7.0

2.6.0

2.5.2

2.5.1

2.5.0

2.4.0

2.3.0

2.2.0

2.1.1

2.1.0

2.0.0

2.0.0rc4 pre-release

2.0.0rc3 pre-release

2.0.0rc2 pre-release

2.0.0rc1 pre-release

2.0.0rc0 pre-release

1.3.0

1.2.0

1.1.1

1.1.0

1.0.0

1.0.0rc3 pre-release

1.0.0rc2 pre-release

1.0.0rc1 pre-release

1.0.0rc0 pre-release

0.12.3

0.12.2

0.12.1

0.12.0

0.11.1

0.11.0

0.10.2

0.10.1 yanked

Reason this release was yanked:

Broken build - use 0.10.2

0.10.0

0.9.1

0.9.0

0.8.3

0.8.2

0.8.1

0.8.0

0.7.0

0.6.2

0.6.1

0.6.0

0.5.0

0.4.1

0.4.0

0.3.0

0.2.0

0.1.0

0.0.11

0.0.10

0.0.9

0.0.8

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx_python_lib-8.0.0rc1.tar.gz (1.1 MB view details)

Uploaded Source

Built Distribution

cyclonedx_python_lib-8.0.0rc1-py3-none-any.whl (365.9 kB view details)

Uploaded Python 3

File details

Details for the file cyclonedx_python_lib-8.0.0rc1.tar.gz.

File metadata

File hashes

Hashes for cyclonedx_python_lib-8.0.0rc1.tar.gz
Algorithm Hash digest
SHA256 9860f1675d826aa29ba8e8fe2bcd66fe9d4916144a036fa379a91d2c92195217
MD5 d9e800560f9612df14fa2fdc56e84d3b
BLAKE2b-256 cf99875406de9fa9a82f567d86a422be1b2a9acf68a2ab974dd385543c0d94c7

See more details on using hashes here.

Provenance

File details

Details for the file cyclonedx_python_lib-8.0.0rc1-py3-none-any.whl.

File metadata

File hashes

Hashes for cyclonedx_python_lib-8.0.0rc1-py3-none-any.whl
Algorithm Hash digest
SHA256 a3b6036d9e252642b01b01abb2f160df51b8a1a89dd79a72cae65e9c3c56c560
MD5 7ea663906b8618ef287e94436e7b180e
BLAKE2b-256 653ac6e3587fc360126e7f73b2552f31df9c46915f9f79e00dcf6fe37d8f55cc

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page