Pricing

from $490.00 / 1,000 sbom generateds

Syft SBOM Generator

Generate a real, standards-compliant SBOM (Software Bill of Materials) for a container image or git repository using Syft, in CycloneDX or SPDX format. Get a full dependency inventory covering OS packages and application libraries across every major ecosystem. $0.49 per generated SBOM.

Pricing

from $490.00 / 1,000 sbom generateds

Rating

0.0

(0)

Developer

Virtual Footprint LLC

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Dependency SBOM Auditor

timely_quarterstaff/dependency-sbom-auditor

Parse a dependency manifest (package.json, requirements.txt, pyproject.toml, go.mod, Cargo.toml, Gemfile, composer.json) from text or a public raw URL into a clean dependency list + a CycloneDX SBOM (JSON). Deterministic, no AI. Optional free keyless OSV.dev advisory enrichment. SSRF-guarded.

Ahmed Moussa

SBOM Diff Reporter

junipr/sbom-diff-reporter

Compare two SPDX/CycloneDX SBOMs and summarize package, version, license, and risk-relevant changes.

junipr

SBOM Exploit Prioritizer MCP

q_services/sbom-exploit-prioritizer-mcp

Prioritize SBOM vulnerabilities with OSV, CISA KEV and EPSS for agent remediation workflows.

Q Services

Open Source Software Supply Chain MCP Server

ryanclinton/open-source-software-supply-chain-mcp

OSS dependency risk and SBOM compliance intelligence for application security teams, engineering leadership, and procurement.

Ryan Clinton

SBOM Vulnerability Auditor

technicaldost/sbom-vulnerability-auditor

Audit CycloneDX, package-lock, or simple package lists against OSV.

Technical Dost Solutions

OSS Dependency Risk Report — Bus Factor, CVEs & SBOM Compliance

ryanclinton/oss-dependency-risk-report

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

Ryan Clinton

SPDX Software Licenses Scraper

parseforge/spdx-software-licenses-scraper

Pull the SPDX License List with standardized identifiers: license ID, full name, OSI approved flag, FSF libre flag, deprecated status, reference URL, text, and cross references. Export to JSON, CSV, or Excel for SBOM, open source compliance, license scanning, and supply chain audits.

ParseForge

Developer Signal Monitor

silicon1235/developer-signal-monitor

Monitor public npm packages, maintainers, package license changes, GitHub releases, OSV/SBOM advisories, and Docker tags for developer signals.

X L

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.