Skip to content
IT_TOOLS_

/SBOM Generator

Generate a local CycloneDX SBOM from simple dependency lists before supply-chain review.

Local processing

This tool processes your input in your browser.

Command Palette

Search for a command to run...

Dependencies

One package per line: package@version, package==version or module:version.

CycloneDX JSON

3 dependencies parsed locally

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.5",
  "serialNumber": "urn:uuid:replace-with-uuid",
  "version": 1,
  "components": [
    {
      "type": "library",
      "name": "react",
      "version": "19.2.8",
      "purl": "pkg:npm/react@19.2.8"
    },
    {
      "type": "library",
      "name": "next",
      "version": "16.3.4",
      "purl": "pkg:npm/next@16.3.4"
    },
    {
      "type": "library",
      "name": "express",
      "version": "4.21.0",
      "purl": "pkg:npm/express@4.21.0"
    }
  ]
}