OWASP CycloneDX is a full‑stack Bill of Materials (BOM) and system‑transparency standard that provides deep visibility into software, services, hardware, and AI components, enabling advanced supply‑chain security and cyber‑risk reduction.

This Python package provides data models, validators and more, to help you create/render/read CycloneDX documents.

Complete documentation is available on Read the Docs. This includes:

• Responsibilities & Capabilities
• Install Instructions
• API Reference
• Usage Examples
• Integration Guides
• Best Practices

We endeavour to support all functionality for all current actively supported Python versions. However, some features may not be possible/present in older Python versions due to their lack of support.

See our CHANGELOG.

Feel free to open issues, bugreports or pull requests.
See the CONTRIBUTING file for details.

CycloneDX Python Lib is Copyright (c) OWASP Foundation. All Rights Reserved.
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.
See the LICENSE file for the full license.