# Tools

> Open source management tools I contribute to. They cover SBOM generation, open source risk analysis, vulnerability and license management, and notice generation.

---

LLMS index: [llms.txt](/llms.txt)

---

Open source management tools I contribute to. Click a card to go to its GitHub repository.

<div class="tool-cards">
  <a class="tool-card" href="https://github.com/sktelecom/bomlens" target="_blank" rel="noopener">
    <div class="tool-card__head">
      <img class="tool-card__logo" src="/img/tools/bomlens.svg" alt="BomLens logo" width="44" height="44" loading="lazy">
      <h2 class="tool-card__title">BomLens</h2>
    </div>
    <p class="tool-card__desc">A local-first SBOM generator and open source risk assessor (CycloneDX). Produces an SBOM, an open source notice, and a security and license risk report from source, containers, binaries, firmware, or an existing SBOM. CLI or web UI, no SaaS.</p>
    <div class="tool-card__meta">github.com/sktelecom/bomlens</div>
  </a>
  <a class="tool-card" href="https://github.com/trustedoss/trusca" target="_blank" rel="noopener">
    <div class="tool-card__head">
      <img class="tool-card__logo" src="/img/tools/trusca.svg" alt="TRUSCA logo" width="44" height="44" loading="lazy">
      <h2 class="tool-card__title">TRUSCA</h2>
    </div>
    <p class="tool-card__desc">A self-hosted, open source SCA portal. Vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck and Snyk class capabilities, Apache-2.0.</p>
    <div class="tool-card__meta">github.com/trustedoss/trusca</div>
  </a>
  <a class="tool-card" href="https://github.com/sktelecom/onot" target="_blank" rel="noopener">
    <div class="tool-card__head">
      <img class="tool-card__logo" src="/img/tools/onot.svg" alt="onot logo" width="44" height="44" loading="lazy">
      <h2 class="tool-card__title">onot</h2>
    </div>
    <p class="tool-card__desc">Generate open source notices (OSS Notice) from SBOM documents (SPDX, CycloneDX, Excel) to HTML, Text, Markdown, or PDF. Offline, type-safe Python core with CLI, local API, and an installable desktop app.</p>
    <div class="tool-card__meta">github.com/sktelecom/onot</div>
  </a>
</div>