Pinned Loading

1. DependencyTrack/dependency-track DependencyTrack/dependency-track Public

   Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

   Java 2.5k 536

2. CycloneDX/specification CycloneDX/specification Public

   OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, an…

   XSLT 344 56

3. package-url/purl-spec package-url/purl-spec Public

   A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

   645 152

4. OWASP/Software-Component-Verification-Standard OWASP/Software-Component-Verification-Standard Public

   Software Component Verification Standard (SCVS)

   Python 132 36

5. CPE-Parser CPE-Parser Public

   A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

   Java 46 15

6. cvss-calculator cvss-calculator Public

   A Java library for calculating CVSSv2 and CVSSv3 scores and vectors

   Java 35 22