Is sbom2dot safe to use?

sbom2dot has no known vulnerabilities on the latest version (0.3.2). DepScope rates its health at 44/100 (high risk).

What is the latest version of sbom2dot?

The latest version of sbom2dot is 0.3.2, released 2025-04-28.

Does sbom2dot have known vulnerabilities?

No known vulnerabilities on the latest version of sbom2dot.

Is sbom2dot deprecated?

No, sbom2dot is actively maintained. Latest release: 0.3.2 (2025-04-28).

What are alternatives to sbom2dot?

Popular alternatives to sbom2dot in PyPI include: boto3, packaging, urllib3, idna, requests.

What license does sbom2dot use?

sbom2dot is licensed under Apache-2.0.

sbom2dot

pypiv0.3.2

Create a dependency graph of the components within a SBOM

License Apache-2.0permissive6 versions1 maintainers1 deps1,172 weekly dl

anthonyharrison/sbom2dot

/ 100

Health

use with caution

[email protected] low health (44/100) — consider alternatives

Moderate health score (44/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

6/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Health History

Dependency Tree

License Audit

Dependencies (1)

lib4sbom

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/sbom2dot