https://github.com/cyclonedx/cyclonedx-core-java

CycloneDX SBOM Model and Utils for Creating and Validating BOMs
https://github.com/cyclonedx/cyclonedx-core-java

bill-of-materials bom cyclonedx library mbom obom owasp package-url purl saasbom sbom software-bill-of-materials spdx vex

Last synced: 5 days ago
JSON representation

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

• Host: GitHub
• URL: https://github.com/cyclonedx/cyclonedx-core-java
• Owner: CycloneDX
• License: apache-2.0
• Created: 2018-05-30T22:50:46.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2025-01-11T17:04:32.000Z (13 days ago)
• Last Synced: 2025-01-11T20:00:12.681Z (12 days ago)
• Topics: bill-of-materials, bom, cyclonedx, library, mbom, obom, owasp, package-url, purl, saasbom, sbom, software-bill-of-materials, spdx, vex
• Language: Java
• Homepage: https://cyclonedx.org/
• Size: 21.6 MB
• Stars: 83
• Watchers: 8
• Forks: 64
• Open Issues: 32
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE
  • Codeowners: CODEOWNERS

Awesome Lists containing this project

README

        
[![Build Status](https://github.com/CycloneDX/cyclonedx-core-java/workflows/Maven%20CI/badge.svg)](https://github.com/CycloneDX/cyclonedx-core-java/actions?workflow=Maven+CI)

[![Maven Central](https://maven-badges.herokuapp.com/maven-central/org.cyclonedx/cyclonedx-core-java/badge.svg)](https://maven-badges.herokuapp.com/maven-central/org.cyclonedx/cyclonedx-core-java)

[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg)][License]

[![Website](https://img.shields.io/badge/https://-cyclonedx.org-blue.svg)](https://cyclonedx.org/)

[![Slack Invite](https://img.shields.io/badge/Slack-Join-blue?logo=slack&labelColor=393939)](https://cyclonedx.org/slack/invite)

[![Group Discussion](https://img.shields.io/badge/discussion-groups.io-blue.svg)](https://groups.io/g/CycloneDX)

[![Twitter](https://img.shields.io/twitter/url/http/shields.io.svg?style=social&label=Follow)](https://twitter.com/CycloneDX_Spec)

CycloneDX Core (Java)

=========

The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, 

validating, and parsing SBOMs. OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced

supply chain capabilities for cyber risk reduction

Maven Usage

-------------------

```xml

    org.cyclonedx

    cyclonedx-core-java

    10.1.0

```

## CycloneDX Schema Support

The following table provides information on the version of this node module, the CycloneDX schema version supported, 

as well as the output format options. Use the latest possible version of this library that is the compatible with 

the CycloneDX version supported by the target system.

| Version |  Schema Version  | Format(s) |

|---------|------------------|-----------|

| 10.x    | CycloneDX v1.6.1 | XML/JSON  |

| 9.x     | CycloneDX v1.6   | XML/JSON  |

| 8.x     | CycloneDX v1.5   | XML/JSON  |

| 7.x     | CycloneDX v1.4   | XML/JSON  |

| 6.x     | CycloneDX v1.4   | XML/JSON  |

| 5.x     | CycloneDX v1.3   | XML/JSON  |

| 4.x     | CycloneDX v1.2   | XML/JSON  |

| 3.x     | CycloneDX v1.2   | XML/JSON  |

| 2.x     | CycloneDX v1.1   | XML       |

| 1.x     | CycloneDX v1.0   | XML       |

## Library API Documentation

The library API documentation can be viewed online at [https://cyclonedx.github.io/cyclonedx-core-java/](https://cyclonedx.github.io/cyclonedx-core-java/).

Copyright & License

-------------------

CycloneDX Core (Java) is Copyright (c) OWASP Foundation. All Rights Reserved.

Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [License] file for the full license.

[License]: https://github.com/CycloneDX/cyclonedx-core-java/blob/master/LICENSE