drop cyclonedx or spdx sbom · cve match · license summary · risk score · csv + json export · runs locally
parses components · matches bundled CVE db · classifies licenses
drop cyclonedx or spdx json sbom