CycloneDX Python Library

---

OWASP CycloneDX is a full‑stack Bill of Materials (BOM) and system‑transparency standard that provides deep visibility into software, services, hardware, and AI components, enabling advanced supply‑chain security and cyber‑risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

[!NOTE]
This package is a software library not intended for standalone use.
For generating Software Bill of Materials (SBOM), check out CycloneDX Python or Jake.

Documentation

Complete documentation is available on Read the Docs. This includes:

• Responsibilities & Capabilities
• Install Instructions
• API Reference
• Usage Examples
• Integration Guides
• Best Practices

Python Support

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

Changelog

See our CHANGELOG.

Contributing

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

Copyright & License

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.