Tools to analyse CycloneDX SBOM files
npm install @zakodium/sbom-tools
Tools to analyse CycloneDX SBOM files.
``console`
npm install @zakodium/sbom-tools
The tools expect a SBOM file in CycloneDX JSON format, version 1.6.
#### npm
See
A compatible SBOM can be generated with:
`shell`
npx --package @cyclonedx/cyclonedx-npm cyclonedx-npm --omit=dev --spec-version=1.6 --gather-license-texts --output-reproducible --output-file=sbom.json
#### Yarn
See
A compatible SBOM can be generated with:
`shell``
yarn dlx -q @cyclonedx/yarn-plugin-cyclonedx --production --spec-version=1.6 --gather-license-texts --output-reproducible --output-file=sbom.json