Parser Features
Format Support
Seamlessly handles JSON (SPDX 2.2/2.3/3.0, CycloneDX), Tag-Value (.spdx, .tv), and legacy XML formats.
Hierarchical View
Explore your dependencies through an intuitive tree-view displaying both direct and transitive components.
Clean Data
Automatically cleans supplier names and formats package manager locators (npm, pypi, maven) into a unified column.
1-Click CSV Export
Export all your parsed and cleaned data directly to a clean CSV format, preserving dependency indentation.
Generator Features
Multi-Language
Universal support for 14 major ecosystems including Python, Node.js, Go, Java, Rust, Swift, and more.
Dependency Scopes
Classifies Direct vs Transitive dependencies by parsing over 28 different manifest and lockfile formats.
SPDX 2.3 Output
Generates fully compliant SPDX 2.3 JSON SBOM files ready for auditing and compliance.
Modern GUI
A beautiful dark-themed PySide6 interface with real-time scan logging and ecosystem breakdown tables.
Fast & Local
Everything runs completely locally on a background worker thread. No cloud dependencies or API keys needed.
Simple Setup
The Parser uses standard tkinter (zero dependencies), while the Generator uses PySide6 for a modern GUI. Both run completely locally!
git clone https://github.com/dipta-roy/SBOM_Suite.git
cd SBOM_Suite
# Run the Generator
python SBOM_Generator.py
# Run the Parser
python SBOM_Parser_GUI.py
Extracted Fields
| Column | Description |
|---|---|
| SPDX_ID | Package SPDX identifier |
| Name | Package name |
| Version | Version string |
| Supplier | Cleaned supplier / author |
| License_Declared | Declared license |
| Copyright_Text | Copyright statement |
| Package_Manager_Locator | Package manager coordinates (PURL-like) |