Enrich SBOMs with data from third party services

Tool for using SBOMs with ClearlyDefined

Reference GitHub Workflows for SBOM generation from the CISA SBOM Generation Reference Implementation Tiger Team

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Convert SHACL model to code bindings

content for outreach activities

Materials for a proposed W3C workshop "Secure the Web Forward"

A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles

machine readable OSI license information

See who is actually doing the work in your projects

Source documents for HOWTO on creating an SPDX NTIA minimum elements SBOM

Flutter package to share images/videos/text on social media

A collection of useful packages maintained by the Flutter team

A simple utility plugin to make it easier for a flutter project to add and communicate with wearable devices

This is the repository for the master files that comprise the SPDX License List

This is a copy of the LicenseListXML repository to be used for testing

Java library which implements the Java object model for SPDX and provides useful helper functions

This repo realizes the idea that OSS compliance activities will be less expensive by applying OSS principles

Python library to enable scriptable control of a FOSSology server

The SPDX specification in MarkDown and HTML formats.

🚄 A CLI utility for moving data to and from Cloud Firestore

CircleProgress, DonutProgress, ArcProgress