You can access the SBOM Vulnerability Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = { "packageList": """npm:lodash@4.17.20
9PyPI:django@2.2.0""" }
10
11# Run the Actor and wait for it to finish
12run = client.actor("technicaldost/sbom-vulnerability-auditor").call(run_input=run_input)
13
14# Fetch and print Actor results from the run's dataset (if there are any)
15print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
16for item in client.dataset(run["defaultDatasetId"]).iterate_items():
17    print(item)
18
19# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

SBOM Vulnerability Auditor - Scan Software BOMs API in Python

The Apify API client for Python is the official library that allows you to use SBOM Vulnerability Auditor API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

SBOM Vulnerability Auditor API in JavaScript

SBOM Vulnerability Auditor API through CLI

SBOM Vulnerability Auditor OpenAPI definition

SBOM Vulnerability Auditor API

OSV Package Vulnerability Monitor

orbiscribe/osv-package-vulnerability-monitor

Monitor package vulnerability records from OSV.dev for npm, PyPI, Go, Maven, crates.io, RubyGems, and SBOM-derived package lists.

Orbiscribe Labs

OSV Vulnerability Scraper - Package Risk Data

benthepythondev/osv-vulnerability-scraper

Scrape OSV vulnerability data for open-source packages: CVE/GHSA IDs, summaries, affected ranges and references.

Ben

NPM Lockfile Threat Scanner – Compromised Package Checker

halcyon_twine/npm-lockfile-threat-scanner

Check package-lock.json, yarn.lock or pnpm-lock.yaml for known-malicious (compromised) package versions — supply-chain attack triage in seconds, no install needed.

Jeff Rogers

SBOM Diff Reporter

junipr/sbom-diff-reporter

Compare two SPDX/CycloneDX SBOMs and summarize package, version, license, and risk-relevant changes.

junipr

Open Source Vulnerability Monitor

silicon1235/open-source-vulnerability-monitor

OSV vulnerability monitor for public open-source package advisory changes, severity filters, and fix-aware alerts.

X L

Dependency SBOM Auditor

timely_quarterstaff/dependency-sbom-auditor

Parse a dependency manifest (package.json, requirements.txt, pyproject.toml, go.mod, Cargo.toml, Gemfile, composer.json) from text or a public raw URL into a clean dependency list + a CycloneDX SBOM (JSON). Deterministic, no AI. Optional free keyless OSV.dev advisory enrichment. SSRF-guarded.

Ahmed Moussa

SBOM Vulnerability Scanner — Lockfile CVE Scan (OSV/KEV)

malonestar/sbom-vulnerability-rollup

SBOM vulnerability scanner: paste an npm, pip or go lockfile and get a prioritized CVE report with upgrade targets. Batch-queries OSV.dev, flags CISA KEV known-exploited vulns, adds NVD CVSS, and computes the minimum fix version per package plus a severity rollup. Keyless.

Kyle Maloney

NuGet Package Scraper - .NET Package Metadata

benthepythondev/nuget-package-scraper

Scrape NuGet package metadata with package ID, version, description, downloads, authors, tags, project URL and license URL.

Ben

Hackage Packages Scraper - Haskell Package Search

benthepythondev/hackage-packages-scraper

Search Hackage package names and export matching package identifiers with canonical package links.

Ben

PyPI Package & Dependency Scraper

taroyamada/pypi-package-dependency-intelligence

Extract Python package dependency declarations, release cadence, maintainer hints, download stats, and OSV vulnerability summaries from the official PyPI JSON API.