Pre-alpha tool for analyzing spdx SBOMs generated by GitHub
Pre-alpha tool for analyzing spdx SBOMs generated by GitHub
I've become interested in SBOM recently, and found there were great tools like https://dependencytrack.org/ for CycloneDX SBOMs, but all I have is SPDX SBOMs generated by GitHub. I decided to have a go at writing my own dependency track esque tool aiming to integrate with the APIs GitHub provides. It's pretty limited in functionality so far, but can give a high level summary of the types of licenses your repository dependencies use, and let you drill down into potentially problematic ones. Written in NextJS + mui + sqlite, and using another project of mine to generate most of the API boilerplate/glue ( https://github.com/mnahkies/openapi-code-generator )
Share cardActual performance
Launch Intel predictions
Analyze your own launch →Incorrect prediction on native model
Similar products
Prototyping Tool Alpha
Snap4Arduino, pre-alpha release
Hazelian-1 AGI Kernel v2020.00001 pre-alpha 1
Schesign alpha
Sshwifty WebSSH (Alpha)
Bootstrap 5 Alpha Tutorial
Taskord alpha is out now
Fastify/Vue 1.0 Alpha
Simulating the vacuum as a superfluid to derive Alpha = 1/137
I made a tool that monetizes GitHub repositories