CycloneDX Node.js SBOM Generators

repository·master·Indexed 41 days ago

https://github.com/cyclonedx/cyclonedx-node-module

A meta-package and ecosystem of tools for generating Software Bill-of-Materials (SBOMs) in Node.js. Includes specific generators for npm (@cyclonedx/cyclonedx-npm) and yarn (@cyclonedx/yarn-plugin-cyclonedx), as well as the @cyclonedx/cyclonedx-library for programmatic data model manipulation and serialization.

Tokens: 572
Snippets: 2
Records: 3
Agent score: 0%

What's inside CycloneDX

Select the correct CycloneDX tool for your ecosystem
master
The @cyclonedx/bom package is a meta-package that does not contain functional code itself. Instead, it serves as a collection of optional dependencies.
Do not depend on this meta-package directly. Instead, install the specific tool that matches your project's package manager or build system to generate a CycloneDX Software Bill-of-Materials (SBOM).
```
### For Node Package Managers

| Ecosystem | Actual Tool |
|:---------:|:------------|
| _npm_ | `@cyclonedx/cyclonedx-npm` |
| _pnpm_ | Native subcommand: `pnpm sbom` |
| _yarn_ | `@cyclonedx/yarn-plugin-cyclonedx` |
```
https://github.com/cyclonedx/cyclonedx-node-module/blob/master/README.md
Use the CycloneDX library for data models and serialization
master
If you need a JavaScript or TypeScript library to programmatically work with CycloneDX data models, handle serialization, or manipulate SBOM data, use @cyclonedx/cyclonedx-library instead of the CLI tools.
https://github.com/cyclonedx/cyclonedx-node-module/blob/master/README.md

Select CycloneDX tools for build systems and bundlers

master

If your project uses a specific bundler or build tool rather than a standard package manager, use the corresponding CycloneDX plugin or tool listed below:

| System | Actual Tool(s) |
|:------:|:---------------|
| _Angular_ | `@cyclonedx/cyclonedx-esbuild` or `@cyclonedx/webpack-plugin` |
| _Bun_ | `@cyclonedx/cyclonedx-esbuild` |
| _Esbuild_ | `@cyclonedx/cyclonedx-esbuild` |
| _Parcel_ | To be announced |
| _React_ | `@cyclonedx/webpack-plugin` |
| _Rollup_ | `rollup-plugin-sbom` |
| _Rspack/Rsbuild_ | To be announced |
| _Svelte_ | To be announced |
| _Vite_ | `rollup-plugin-sbom` |
| _Vue_ | `rollup-plugin-sbom` or `@cyclonedx/webpack-plugin` |
| _Webpack_ | `@cyclonedx/webpack-plugin` |