{"id":20617817,"url":"https://github.com/cyclonedx/cyclonedx-go","last_synced_at":"2025-05-15T03:04:46.425Z","repository":{"id":38191008,"uuid":"343748564","full_name":"CycloneDX/cyclonedx-go","owner":"CycloneDX","description":"Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)","archived":false,"fork":false,"pushed_at":"2025-03-01T09:15:21.000Z","size":840,"stargazers_count":85,"open_issues_count":20,"forks_count":33,"subscribers_count":8,"default_branch":"master","last_synced_at":"2025-03-05T09:03:14.758Z","etag":null,"topics":["bill-of-materials","bom","golang","library","mbom","obom","owasp","saasbom","sbom","software-bill-of-materials","vex"],"latest_commit_sha":null,"homepage":"https://cyclonedx.org/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/CycloneDX.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"custom":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"]}},"created_at":"2021-03-02T11:20:02.000Z","updated_at":"2025-02-24T10:25:32.000Z","dependencies_parsed_at":"2023-09-29T12:46:33.791Z","dependency_job_id":"12e8b477-3604-491e-9774-4cd07f704fdf","html_url":"https://github.com/CycloneDX/cyclonedx-go","commit_stats":{"total_commits":115,"total_committers":7,"mean_commits":"16.428571428571427","dds":"0.30434782608695654","last_synced_commit":"847a418155929f5d21c35102b5d82d06df6792d8"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-go","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-go/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-go/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/CycloneDX%2Fcyclonedx-go/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/CycloneDX","download_url":"https://codeload.github.com/CycloneDX/cyclonedx-go/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248166858,"owners_count":21058481,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bill-of-materials","bom","golang","library","mbom","obom","owasp","saasbom","sbom","software-bill-of-materials","vex"],"created_at":"2024-11-16T12:06:05.938Z","updated_at":"2025-04-10T06:17:20.456Z","avatar_url":"https://github.com/CycloneDX.png","language":"Go","funding_links":["https://owasp.org/donate/?reponame=www-project-cyclonedx\u0026title=OWASP+CycloneDX"],"categories":[],"sub_categories":[],"readme":"# cyclonedx-go\n\n[![Build Status](https://github.com/CycloneDX/cyclonedx-go/actions/workflows/ci.yml/badge.svg)](https://github.com/CycloneDX/cyclonedx-go/actions/workflows/ci.yml)\n[![Go Report Card](https://goreportcard.com/badge/github.com/CycloneDX/cyclonedx-go)](https://goreportcard.com/report/github.com/CycloneDX/cyclonedx-go)\n[![Go Reference](https://pkg.go.dev/badge/github.com/nscuro/cyclonedx-go.svg)](https://pkg.go.dev/github.com/CycloneDX/cyclonedx-go)\n[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg)](LICENSE)  \n[![Website](https://img.shields.io/badge/https://-cyclonedx.org-blue.svg)](https://cyclonedx.org/)\n[![Slack Invite](https://img.shields.io/badge/Slack-Join-blue?logo=slack\u0026labelColor=393939)](https://cyclonedx.org/slack/invite)\n[![Group Discussion](https://img.shields.io/badge/discussion-groups.io-blue.svg)](https://groups.io/g/CycloneDX)\n[![Twitter](https://img.shields.io/twitter/url/http/shields.io.svg?style=social\u0026label=Follow)](https://twitter.com/CycloneDX_Spec)\n\n*cyclonedx-go is a Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)*\n\n\u003e If you just want to create BOMs for your Go projects, see [*cyclonedx-gomod*](https://github.com/CycloneDX/cyclonedx-gomod)\n\n## Installation\n\n```\ngo get github.com/CycloneDX/cyclonedx-go\n```\n\n## Usage\n\nPlease refer to the module's [documentation](https://pkg.go.dev/github.com/CycloneDX/cyclonedx-go#section-documentation).  \nAlso, checkout the [`examples`](./example_test.go) to get an idea of how this library may be used.\n\n## Compatibility\n\n| cyclonedx-go versions | Supported Go versions | Supported CycloneDX spec |\n|:---------------------:|:---------------------:|:------------------------:|\n|       \u003c v0.4.0        |         1.14+         |           1.2            |\n|       == v0.4.0       |         1.14+         |           1.3            |\n|  \u003e= v0.5.0, \u003c v0.7.0  |         1.15+         |           1.4            |\n|  \u003e= v0.7.0, \u003c v0.8.0  |         1.17+         |         1.0-1.4          |\n|       == v0.8.0       |         1.18+         |         1.0-1.5          |\n|       \u003e= v0.9.0       |         1.20+         |         1.0-1.6          |\n\nWe're aiming to support all [officially supported](https://golang.org/doc/devel/release.html#policy) Go versions, plus\nan additional older version.\n\nPrior to v0.7.0, this library only supported the latest version of the CycloneDX specification. While it is generally \npossible to *read* BOMs of an older spec, *writing* would exclusively produce BOMs conforming to the latest supported spec.\n\nStarting with v0.7.0, writing BOMs conforming to all previous version of the spec is also possible.\n\n## Copyright \u0026 License\n\nCycloneDX Go is Copyright (c) OWASP Foundation. All Rights Reserved.\n\nPermission to modify and redistribute is granted under the terms of the Apache 2.0 license.  \nSee the [LICENSE](./LICENSE) file for the full license.\n\n## Contributing\n\n[![Open in Gitpod](https://gitpod.io/button/open-in-gitpod.svg)](https://gitpod.io/#https://github.com/CycloneDX/cyclonedx-go)\n\nPull requests are welcome. But please read the\n[CycloneDX contributing guidelines](https://github.com/CycloneDX/.github/blob/master/CONTRIBUTING.md) first.\n\nIt is generally expected that pull requests will include relevant tests. Tests are automatically run against all\nsupported Go versions (see [Compatibility](#compatibility)) for every pull request.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-go","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcyclonedx%2Fcyclonedx-go","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcyclonedx%2Fcyclonedx-go/lists"}