Skip to main content
Any Framework

Generate a CycloneDX 1.6 XML SBOM for a NuGet, npm, or Terraform project. Drop-in replacement for the dotnet CycloneDX and @cyclonedx/cyclonedx-npm tools used in CI pipelines, with layered license resolution (registry metadata → maintained override list) and an embedded SPDX license-override list curated for Umbraco's dependency surface (System.*, Microsoft.Extensions.*, hashicorp/*, …).

Published
Sep 30, 2026
18d ago
Total Downloads
3.1K
3,072

Install

dotnet add package Umbraco.Internal.Sbom --version 1.3.31

No framework information available.

README

Changes from Previous Version

No structural changes between v1.3.30 and v1.3.31.

Adoption Assessment

A verified publisher signal is available. Assess fit from the package's supported frameworks, license and dependency graph rather than popularity alone.

No target framework metadata is available. Confirm compatibility in a representative project before standardising on this package.

Related Guides & Workflows

Learn how to evaluate, integrate, or audit this package in your .NET project.