Download the PHP package mteu/sbom-parser without Composer
On this page you can find all versions of the php package mteu/sbom-parser. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download mteu/sbom-parser
More information about mteu/sbom-parser
Files in mteu/sbom-parser
Package sbom-parser
Short Description Type-safe parser for CycloneDX Software Bill of Materials (SBOM) JSON files
License GPL-3.0-or-later
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package sbom-parser
CycloneDX SBOM (Software Bill of Materials) parser for PHP 8.3+. Supports CycloneDX 1.4+ specifications including components, vulnerabilities, and metadata with full immutable entity design using Valinor for type mapping.
[!NOTE] The CycloneDX ecosystem provides an official PHP library (
cyclonedx/cyclonedx-library) and a Composer plugin for generating SBOMs. These tools are designed to produce BOMs as part of your build pipeline — not for consuming them in application code.This package aims to fill a different gap: Reading and inspecting existing SBOM files.
If your application needs to parse a CycloneDX SBOM and work with its data — querying components, checking vulnerabilities, reading metadata — you need a lightweight, read-only library with clean, type-safe objects. That is what this package aims to provide.
⚡️ Quick Start
Installation
Require the library in your project with Composer:
composer require mteu/sbom-parser
Usage
Instantiate mteu\SbomParser\Parser\CycloneDxParser, read in
the SBOM file, and access the components directly:
See detailed documentation for complete usage examples and API reference.
🤝 Contributing
Contributions are very welcome! Please have a look at the Contribution Guide. It lays out the workflow of submitting new features or bugfixes.
🔒 Security
Please refer to the security policy if you discover a security vulnerability in this extension. Be warned, though. I cannot afford bounty.
⭐ License
This extension is licensed under the GPL-3.0-or-later license.
💬 Support
For issues and feature requests, please use the GitHub issue tracker.
