Umbraco.Internal.Sbom
Generate a CycloneDX 1.6 XML SBOM for a NuGet, npm, or Terraform project. Drop-in replacement for the dotnet CycloneDX and @cyclonedx/cyclonedx-npm tools used in CI pipelines, with layered license resolution (registry metadata → maintained override list) and an embedded SPDX license-override list curated for Umbraco's dependency surface (System.*, Microsoft.Extensions.*, hashicorp/*, …).
Install
dotnet add package Umbraco.Internal.Sbom --version 1.2.19
Install-Package Umbraco.Internal.Sbom -Version 1.2.19
<PackageReference Include="Umbraco.Internal.Sbom" Version="1.2.19" />
Frameworks
No framework metadata available.
Dependencies
No declared dependencies.
Adoption guide
A verified publisher signal is available. Assess fit from the package's supported frameworks, license and dependency graph rather than popularity alone.
No target framework metadata is available. Confirm compatibility in a representative project before standardising on this package.
How to read this guidance
Sources: published NuGet v3 registry metadata and explicit NuBrowse editorial guides. Refresh: package metadata is refreshed from NuGet when the page loads. Limit: this is not a security, legal or compatibility guarantee; validate the selected version in your project.
Useful next steps
Move from package metadata to a concrete selection or review workflow.