CycloneDX/specification
View on GitHubOWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
- Stars
- 551
- Forks
- 93
- Open beginner issues
- 11
- Indexed issues
- 183
- Avg merge
- 4h 51m
- Merged PRs (30d)
- 42
- Dominant language
- XSLT
- License
- Apache-2.0
- Last GitHub push
- Sep 17, 2026
- Latest indexed
- Sep 15, 2026
- Contributing guide
- Contributing guide
- Code of conduct
- Code of conduct
- Beginner labels
- help wanted
-
Response vs Responce Open
Difficulty 1/5 Under an hour Newbie friendliness 68/100
CycloneDX/specification#1121 ·
-
defect documentation
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
CycloneDX/specification#1115 ·
-
cap: cryptography-registry
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
CycloneDX/specification#1098 ·
-
defect
Difficulty 1/5 Under an hour Newbie friendliness 91/100
CycloneDX/specification#1045 · 2 comments ·
-
CDX 2.0 documentation ready for review
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
CycloneDX/specification#1035 ·
-
cap: cryptography-registry defect
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
CycloneDX/specification#1028 ·
-
cap: cryptography-registry defect
Difficulty 1/5 Under an hour Newbie friendliness 86/100
CycloneDX/specification#918 ·
-
cap: cryptography-registry defect
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
CycloneDX/specification#906 · 1 comment ·
-
cap: cryptography-registry defect
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
CycloneDX/specification#905 ·
-
cap: cryptography-registry defect
Difficulty 2/5 1-3 hours Newbie friendliness 64/100
CycloneDX/specification#904 · 3 comments ·
-
cap: cryptography-registry proposed core enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
CycloneDX/specification#857 · 1 comment ·