Is spdx-sbom-generator safe to use?

spdx-sbom-generator has no known vulnerabilities on the latest version (0.0.15). DepScope rates its health at 4/100 (critical risk).

What is the latest version of spdx-sbom-generator?

The latest version of spdx-sbom-generator is 0.0.15, released 2026-01-18.

No known vulnerabilities on the latest version of spdx-sbom-generator.

Yes, spdx-sbom-generator is deprecated: repo_archived

DepScope has no curated alternatives for spdx-sbom-generator at this time.

spdx-sbom-generator is licensed under Apache-2.0 OR CC-BY-4.0.

homebrewv0.0.15deprecated

Support CI generation of SBOMs via golang tooling

License Apache-2.0 OR CC-BY-4.0permissive1 versions1 maintainers1 deps

4

/ 100

Health

find alternative

spdx-sbom-generator is deprecated — find an alternative

Moderate health score (4/100) — verify manually

Package is deprecated

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

9/15

maturity

0/15

community

Vulnerabilities

0

none known

Dependencies (1)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/homebrew/spdx-sbom-generator

Last updated · 2026-01-18T18:06:36Z