Tools
Open source management tools I contribute to. They cover SBOM generation, open source risk analysis, vulnerability and license management, and notice generation.
Open source management tools I contribute to. Click a card to go to its GitHub repository.
BomLens
A local-first SBOM generator and open source risk assessor (CycloneDX). Produces an SBOM, an open source notice, and a security and license risk report from source, containers, binaries, firmware, or an existing SBOM. CLI or web UI, no SaaS.
TRUSCA
A self-hosted, open source SCA portal. Vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck and Snyk class capabilities, Apache-2.0.
onot
Generate open source notices (OSS Notice) from SBOM documents (SPDX, CycloneDX, Excel) to HTML, Text, Markdown, or PDF. Offline, type-safe Python core with CLI, local API, and an installable desktop app.