You can access the SBOM Diff Reporter programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {};
11
12// Run the Actor and wait for it to finish
13const run = await client.actor("junipr/sbom-diff-reporter").call(input);
14
15// Fetch and print Actor results from the run's dataset (if any)
16console.log('Results from dataset');
17console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
18const { items } = await client.dataset(run.defaultDatasetId).listItems();
19items.forEach((item) => {
20    console.dir(item);
21});
22
23// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

SBOM Diff Reporter — API, schema, and developer QA API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use SBOM Diff Reporter API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

SBOM Diff Reporter API in Python

SBOM Diff Reporter API through CLI

SBOM Diff Reporter OpenAPI definition

SBOM Diff Reporter API

SBOM Vulnerability Auditor

technicaldost/sbom-vulnerability-auditor

Audit CycloneDX, package-lock, or simple package lists against OSV.

Technical Dost Solutions

Syft SBOM Generator

ayeeyee/syft-sbom-generator

Generate a real, standards-compliant SBOM (Software Bill of Materials) for a container image or git repository using Syft, in CycloneDX or SPDX format. Get a full dependency inventory covering OS packages and application libraries across every major ecosystem. $0.49 per generated SBOM.

Virtual Footprint LLC

SPDX Software Licenses Scraper

parseforge/spdx-software-licenses-scraper

Pull the SPDX License List with standardized identifiers: license ID, full name, OSI approved flag, FSF libre flag, deprecated status, reference URL, text, and cross references. Export to JSON, CSV, or Excel for SBOM, open source compliance, license scanning, and supply chain audits.

ParseForge

Diff Dataset Fields

lukaskrivka/diff-dataset-fields

Compare changes in text fields between two datasets. Monitor new and updated content on websites.

Lukáš Křivka

Developer Signal Monitor

silicon1235/developer-signal-monitor

Monitor public npm packages, maintainers, package license changes, GitHub releases, OSV/SBOM advisories, and Docker tags for developer signals.

X L

NuGet Package Scraper - .NET Package Metadata

benthepythondev/nuget-package-scraper

Scrape NuGet package metadata with package ID, version, description, downloads, authors, tags, project URL and license URL.

Ben

Api Diff API

vivid_astronaut/api-diff

BRAINIALL Team

Nih Reporter Scraper

quarterly_jingo/nih-reporter-scraper

Petey Boy

Dependency SBOM Auditor

timely_quarterstaff/dependency-sbom-auditor

Parse a dependency manifest (package.json, requirements.txt, pyproject.toml, go.mod, Cargo.toml, Gemfile, composer.json) from text or a public raw URL into a clean dependency list + a CycloneDX SBOM (JSON). Deterministic, no AI. Optional free keyless OSV.dev advisory enrichment. SSRF-guarded.