| Port details |
- py-lib4sbom Software bill of material (SBOM) generator and consumer library
- 0.9.4 security
 =0      0.8.7Version of this port present on the latest quarterly branch. - Maintainer: tuukka.pasanen@ilmi.fi
- Port Added: 2025-07-16 15:30:18
- Last Update: 2026-02-10 14:48:43
- Commit Hash: ccc5db8
- Also Listed In: python
- License: APACHE20
- WWW:
- https://github.com/anthonyharrison/lib4sbom
- Description:
- Lib4SBOM is a library to parse and generate Software Bill of Materials (SBOMs).
It supports SBOMs created in both SPDX and CycloneDX formats.
It has been developed on the assumption that having a generic abstraction of
SBOM regardless of the underlying format will be useful to developers.
The following facilities are provided:
* Generate SPDX SBOM in TagValue, JSON and YAML formats
* Generate CycloneDX SBOM in JSON format
* Parse SPDX SBOM in TagValue, JSON, YAML, XML and RDF formats
* Parse CycloneDX SBOM in JSON and XMLformat
* Create and manipulate a SBOM file object
* Create and manipulate a SBOM package object
* Create and manipulate a SBOM dependency relationship object
* Create and manipulate a Vulnerability object
* Create and manipulate a Software Service object
* Generated SBOM can be output to a file or to the console
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - There is no configure plist information for this port.
- USE_RC_SUBR (Service Scripts)
- no SUBR information found for this port
- Dependency lines:
-
- ${PYTHON_PKGNAMEPREFIX}lib4sbom>0:security/py-lib4sbom@${PY_FLAVOR}
- To install the port:
- cd /usr/ports/security/py-lib4sbom/ && make install clean
- To add the package, run one of these commands:
- pkg install security/py-lib4sbom
- pkg install py311-lib4sbom
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
NOTE: This is a Python port. Instead of py311-lib4sbom listed in the above command, you can pick from the names under the Packages section.- PKGNAME: py311-lib4sbom
- Package flavors (<flavor>: <package>)
- distinfo:
- TIMESTAMP = 1770636739
SHA256 (anthonyharrison-lib4sbom-v0.9.4_GH0.tar.gz) = 272a12023d0c87845024530afc90dc3e6fd9987753f585d986d63b2e86416345
SIZE (anthonyharrison-lib4sbom-v0.9.4_GH0.tar.gz) = 1974992
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- py311-setuptools>0 : devel/py-setuptools@py311
- py311-wheel>=0 : devel/py-wheel@py311
- python3.11 : lang/python311
- py311-build>=0 : devel/py-build@py311
- py311-installer>=0 : devel/py-installer@py311
- Test dependencies:
-
- py311-pytest>=7,1 : devel/py-pytest@py311
- python3.11 : lang/python311
- Runtime dependencies:
-
- py311-defusedxml>0 : devel/py-defusedxml@py311
- py311-pyyaml>=5.4 : devel/py-pyyaml@py311
- py311-requests>=2.32 : www/py-requests@py311
- py311-semantic-version>=2.8<3 : devel/py-semantic-version@py311
- py311-xmlschema>0 : textproc/py-xmlschema@py311
- py311-jsonschema>0 : devel/py-jsonschema@py311
- py311-fastjsonschema>0 : devel/py-fastjsonschema@py311
- python3.11 : lang/python311
- This port is required by:
- for Run
-
- security/py-distro2sbom
Configuration Options:- ===> The following configuration options are available for py311-lib4sbom-0.9.4:
EXAMPLES=on: Build and/or install examples
===> Use 'make config' to modify these settings
- Options name:
- security_py-lib4sbom
- USES:
- python
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Number of commits found: 2
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
0.9.4
10 Feb 2026 14:48:43
 |
Vladimir Druzenko (vvd)
Author: Tuukka Pasanen |
security/py-lib4sbom: Update 0.8.7 => 0.9.4
Fixes and features:
* improved service component processing for CycloneDX
* convert sbom types between SPDX and CycloneDX
* update licence list
* distributionConstraints
* default licence type
* update suported Python version
* add SBOM validation debug
* Invalid CycloneDX SHA algorithm specified (fixes #73)
* add support for CycloneDX 1.7
* add support for parsing SPDX documents in in-toto statements
* optimised CycloneDX JSON schema validation
* CycloneDX validation fails (fixes #70) (Only the first 15 lines of the commit message are shown above  ) |
0.8.7
16 Jul 2025 14:53:24
|
Muhammad Moinur Rahman (bofh)
Author: Tuukka Pasanen |
security/py-lib4sbom: New port
Lib4SBOM is a library to parse and generate Software Bill of Materials
(SBOMs). It supports SBOMs created in both SPDX and CycloneDX formats.
WWW: https://github.com/anthonyharrison/lib4sbom
PR: 286644
Sponsored by: The FreeBSD Foundation |
Number of commits found: 2
|
As an Amazon Associate I earn from qualifying purchases.