{"id":20617784,"url":"https://github.com/cyclonedx/cyclonedx-dotnet-library","last_synced_at":"2025-04-04T16:15:46.319Z","repository":{"id":37072243,"uuid":"305367128","full_name":"CycloneDX/cyclonedx-dotnet-library","owner":"CycloneDX","description":".NET library to consume and produce CycloneDX Software Bill of Materials (SBOM)","archived":false,"fork":false,"pushed_at":"2025-01-24T21:10:02.000Z","size":4902,"stargazers_count":17,"open_issues_count":34,"forks_count":24,"subscribers_count":6,"default_branch":"main","last_synced_at":"2025-03-28T15:09:55.900Z","etag":null,"topics":["bill-of-materials","bom","cyclonedx","dotnet","dotnet-core","mbom","nuget","obom","owasp","saasbom","sbom","software-bill-of-materials","vex"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CycloneDX.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"custom":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"]}},"created_at":"2020-10-19T11:52:20.000Z","updated_at":"2025-01-02T09:28:11.000Z","dependencies_parsed_at":"2024-04-20T18:22:23.766Z","dependency_job_id":"0cc5b533-4349-474c-820a-7be34a9c1c89","html_url":"https://github.com/CycloneDX/cyclonedx-dotnet-library","commit_stats":{"total_commits":655,"total_committers":29,"mean_commits":"22.586206896551722","dds":0.6564885496183206,"last_synced_commit":"397b046b90522aff6b6eab27742bf7bc24c3100f"},"previous_names":[],"tags_count":46,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-dotnet-library","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-dotnet-library/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-dotnet-library/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-dotnet-library/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CycloneDX","download_url":"https://codeload.github.com/CycloneDX/cyclonedx-dotnet-library/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247208178,"owners_count":20901570,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bill-of-materials","bom","cyclonedx","dotnet","dotnet-core","mbom","nuget","obom","owasp","saasbom","sbom","software-bill-of-materials","vex"],"created_at":"2024-11-16T12:05:57.795Z","updated_at":"2025-04-04T16:15:46.302Z","avatar_url":"https://github.com/CycloneDX.png","language":"C#","funding_links":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"],"categories":[],"sub_categories":[],"readme":"[![Build Status](https://github.com/CycloneDX/cyclonedx-dotnet-library/workflows/.NET%20Core%20CI/badge.svg)](https://github.com/CycloneDX/cyclonedx-dotnet-library/actions?workflow=.NET+Core+CI)\n[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg)][License]\n[![NuGet Version](https://img.shields.io/nuget/v/CycloneDX.Core.svg)](https://www.nuget.org/packages/CycloneDX.Core/)\n![Nuget](https://img.shields.io/nuget/dt/CycloneDX.Models.svg)\n[![Website](https://img.shields.io/badge/https://-cyclonedx.org-blue.svg)](https://cyclonedx.org/)\n[![Slack Invite](https://img.shields.io/badge/Slack-Join-blue?logo=slack\u0026labelColor=393939)](https://cyclonedx.org/slack/invite)\n[![Group Discussion](https://img.shields.io/badge/discussion-groups.io-blue.svg)](https://groups.io/g/CycloneDX)\n[![Twitter](https://img.shields.io/twitter/url/http/shields.io.svg?style=social\u0026label=Follow)](https://twitter.com/CycloneDX_Spec)\n\n# CycloneDX libraries for .NET\n\nThe CycloneDX libraries for .NET support programmatically consuming and producing CycloneDX bill-of-materials. CycloneDX is a lightweight BOM specification that is easily created, human readable, and simple to parse.\n\nThe libraries support .NET Standard 2.0.\n\n## Getting Started\n\nFor help getting started using the CycloneDX .NET Library refer to the [documentation](https://cyclonedx.github.io/cyclonedx-dotnet-library/).\n\n## SPDX Interop\n\nThe `CycloneDX.Spdx.Interop` library includes methods for converting between\nCycloneDX and SPDX formats. (Currently only SPDX v2.2 JSON format is supported.)\n\n### High level overview of information lost during conversion:\n\nThis is a high level overview of information that will be lost during\nconversion. This is current state only, some features are yet to be\nimplemented as indicated below.\n\nIf you are familiar with both formats, and would like to contribute to\nminimising data loss during conversion, pull requests are welcome :)\n\n#### SPDX -\u003e CycloneDX\n\n| Feature | Notes |\n| --- | --- |\n| Relationship Information | Implementation pending, related to CycloneDX component assemblies, dependency graph, and composition. |\n| License information in files | Needs review, the way SPDX and CycloneDX handle license information evidence is slightly different. |\n| Snippet Information | Snippets are not currently supported by CycloneDX |\n| Non-SPDX licenses | Implementation pending |\n\n#### CycloneDX -\u003e SPDX\n\n| Feature | Notes |\n| --- | --- |\n| Component assemblies | Implementation pending - related to SPDX Relationship Information |\n| Hashes | SPDX documents are unable to represent the following hash algorithms: SHA3-256, SHA3-384, SHA3-512, BLAKE2b-256, BLAKE2b-384, BLAKE2b-512, BLAKE3. |\n| SWID Tags | SPDX doesn't support SWID tags. |\n| Component Type Information | SPDX doesn't support designating a component as a particular type (i.e. library, framework, container). |\n| CPE and Package URL for Component Identity | SPDX supports multiple CPEs and PURLs for a package. But doesn't support specifying if any are a component identifier. |\n| Device \u0026 Hardware Components | SPDX does not support devices or hardware as components. |\n| Composition | Implementation pending - related to SPDX Relationship Information |\n| Dependency Graph | Implementation pending - related to SPDX Relationship Information |\n| External References | External references are handled differently between the two formats. |\n| Non-SPDX licenses | Implementation pending |\n\n## License\n\nPermission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE] file for the full license.\n\n[License]: https://github.com/CycloneDX/cyclonedx-dotnet-library/blob/master/LICENSE\n\n## Contributing\n\nPull requests are welcome. But please read the\n[CycloneDX contributing guidelines](https://github.com/CycloneDX/.github/blob/master/CONTRIBUTING.md) first.\n\nTo build and test the solution locally standard commands like `dotnet build` and `dotnet test` work.\n\nThe protocol buffer tests require the protocol buffer compiler executable `protoc` to be available in your path.\n\nDocumentation is generated using [DocFX](https://dotnet.github.io/docfx/index.html).\n\nIt is generally expected that pull requests will include relevant tests.\nTests are automatically run on Windows, MacOS and Linux for every pull request.\nAnd build warnings will break the build.\n\nIf you are having trouble debugging a test that is failing for a platform you\ndon't have access to please us know.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-dotnet-library","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcyclonedx%2Fcyclonedx-dotnet-library","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-dotnet-library/lists"}