{"id":45245294,"url":"https://github.com/cyclonedx/cyclonedx-bom-studio","last_synced_at":"2026-02-20T22:01:43.409Z","repository":{"id":37086661,"uuid":"231689741","full_name":"CycloneDX/cyclonedx-bom-studio","owner":"CycloneDX","description":"Build, edit, validate, and export CycloneDX BOMs through an intuitive browser-based interface ","archived":false,"fork":false,"pushed_at":"2026-02-17T02:24:34.000Z","size":765,"stargazers_count":8,"open_issues_count":16,"forks_count":4,"subscribers_count":5,"default_branch":"main","last_synced_at":"2026-02-17T07:08:23.659Z","etag":null,"topics":["authoring-tool","bill-of-materials","bom","cyclonedx","mbom","node","obom","owasp","package-url","purl","saasbom","sbom","software-bill-of-materials","spdx","vex","vue"],"latest_commit_sha":null,"homepage":"https://cyclonedx.studio/","language":"Vue","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CycloneDX.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"custom":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"]}},"created_at":"2020-01-04T01:04:22.000Z","updated_at":"2026-02-17T02:29:06.000Z","dependencies_parsed_at":"2023-02-06T04:46:22.160Z","dependency_job_id":null,"html_url":"https://github.com/CycloneDX/cyclonedx-bom-studio","commit_stats":null,"previous_names":["cyclonedx/cyclonedx-bom-studio"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/CycloneDX/cyclonedx-bom-studio","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-bom-studio","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-bom-studio/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-bom-studio/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-bom-studio/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CycloneDX","download_url":"https://codeload.github.com/CycloneDX/cyclonedx-bom-studio/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-bom-studio/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29666422,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-20T19:49:36.704Z","status":"ssl_error","status_checked_at":"2026-02-20T19:44:05.372Z","response_time":59,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["authoring-tool","bill-of-materials","bom","cyclonedx","mbom","node","obom","owasp","package-url","purl","saasbom","sbom","software-bill-of-materials","spdx","vex","vue"],"created_at":"2026-02-20T22:01:42.225Z","updated_at":"2026-02-20T22:01:43.397Z","avatar_url":"https://github.com/CycloneDX.png","language":"Vue","funding_links":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"],"categories":[],"sub_categories":[],"readme":"# CycloneDX BOM Studio\n\nA visual editor for creating and managing [CycloneDX](https://cyclonedx.org/) Bills of Materials (BOMs). BOM Studio lets you build, edit, validate, and export CycloneDX BOMs through an intuitive browser-based interface — no command-line tools or manual JSON editing required.\n\n![image](screenshots/dashboard.png)\n\n## What is a BOM?\n\nA Bill of Materials is a structured inventory of all components, libraries, and dependencies that make up a software or hardware product. BOMs are increasingly required for software supply chain security, regulatory compliance, and vulnerability management. CycloneDX is one of the leading open standards for SBOM representation.\n\n## Features\n\n**Create and Edit BOMs Visually**\nBuild CycloneDX BOMs from scratch or open existing ones for editing. Most fields in the CycloneDX specification are accessible through structured forms with contextual help and validation.\n\n**CycloneDX 1.4 – 1.7 Support**\nFull support for CycloneDX specification versions 1.4 through 1.7. BOMs using older formats (1.0 – 1.5) are automatically upgraded to 1.7 on import. Version-specific fields appear and hide based on the selected spec version.\n\n**Component Management**\nAdd and edit components of all CycloneDX types: application, framework, library, container, platform, device, device-driver, firmware, file, machine-learning-model, data, cryptographic-asset. Each component type shows its relevant property editors.\n\n**Dependency Visualization**\nView and edit dependency relationships in three ways: a searchable table, a collapsible tree, and an interactive force-directed graph. Filter dependencies by component name and navigate between views.\n\n**Real-Time Validation**\nValidate your BOM against the official CycloneDX JSON schema at any time. Validation errors are shown inline with direct navigation to the relevant field.\n\n**Import and Export**\nOpen BOM files in JSON format. Export your work as JSON. View and edit the raw JSON source directly in an integrated CodeMirror editor with syntax highlighting.\n\n**Localization**\nAvailable in 8 languages: English, French, German, Spanish, Chinese (Simplified), Arabic, Japanese, and Russian. RTL layout is supported for Arabic.\n\n**Full BOM Editing Surface**\nEdit all top-level BOM sections: metadata (including tools, authors, supplier, manufacturer, licenses), components, services, dependencies, vulnerabilities, compositions, external references, annotations, formulation, declarations, and definitions.\n\n## Getting Started\n\n### Prerequisites\n\n- [Node.js](https://nodejs.org/) 20 or later\n- npm 10 or later\n\n### Install Dependencies\n\n```bash\nnpm install\n```\n\n### Development Server\n\n```bash\nnpm run dev\n```\n\nOpens a hot-reloading dev server at `http://localhost:5173`.\n\nAlternatively, you can use a local Docker container to run the dev server.\n\n```bash\n./dev.sh\n```\n\n### Production Build\n\n```bash\nnpm run build\n```\n\nOutputs optimized static files to `dist/`. The production build includes Content Security Policy meta tags.\n\n### Preview Production Build\n\n```bash\nnpm run preview\n```\n\n### Run Tests\n\n```bash\nnpm run test              # single run\nnpm run test:watch        # watch mode\nnpm run test:coverage     # with coverage report\n```\n\n### Base URL Configuration\n\nTo deploy under a subpath, set the `BASE_URL` environment variable:\n\n```bash\nBASE_URL=/my-app/ npm run build\n```\n\n## Technology\n\n| Category | Technology |\n|----------|-----------|\n| Framework | Vue 3 (Composition API, `\u003cscript setup\u003e`) |\n| Language | TypeScript 5.9 |\n| Build | Vite 7 |\n| UI Library | Element Plus |\n| State | Pinia |\n| Routing | Vue Router |\n| Validation | AJV with ajv-formats |\n| Code Editor | CodeMirror 6 |\n| Graph | v-network-graph + d3-force |\n| i18n | vue-i18n (lazy-loaded locales) |\n| Styling | SCSS with BEM naming and design tokens |\n| Testing | Vitest + Vue Test Utils + jsdom |\n\n## Project Structure\n\n```\nsrc/\n├── components/\n│   ├── editors/          # Field-level editors (crypto, data, etc.)\n│   ├── layout/           # App shell, header, sidebar\n│   └── shared/           # Reusable form components\n├── composables/          # Shared composition functions\n├── i18n/                 # Internationalization and locale files\n├── router/               # Route definitions\n├── schemas/              # CycloneDX JSON schemas (1.4–1.7)\n├── stores/               # Pinia stores (BOM, UI, validation)\n├── styles/               # SCSS tokens, mixins, global styles\n├── types/                # TypeScript type definitions\n└── views/                # Page-level route components\n```\n\n## Supported CycloneDX Versions\n\n| Spec Version | Support |\n|-------------|---------|\n| 1.2 – 1.5 | Auto-upgraded to 1.7 on import |\n| 1.6 | Full support - JSON only |\n| 1.7 | Full support - JSON only (default) |\n\n## License\n\nSee [LICENSE](LICENSE) for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-bom-studio","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcyclonedx%2Fcyclonedx-bom-studio","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-bom-studio/lists"}