SBOMix

@SBOMixDev

SBOMs + AI-BOMs in one command. CycloneDX, SPDX, and AI model transparency — automatically, on every commit. MIT licensed CLI. EU CRA & AI Act ready.

USA

Pinned
SBOMix
@SBOMixDev
Jun 27
We built SBOMix because Syft generates the list. Nobody was telling you which items on the list are actively burning down buildings. One command. CycloneDX + SPDX + AI-BOM. CISA KEV enrichment. Least-agency scoring for MCP agents. Free CLI: npx sbomix owner/repo Hosted platform: sbomix.com EU CRA deadline is September. Start now.
Made with AI
SBOMix
@SBOMixDev
Jul 7
Your SBOM tool lists your npm + pip deps. It has no idea an MCP server in the repo can read every file on disk. npx sbomix ai-bom . Models, API providers, and every agent tool, each with its authority scope + a Least Agency Score. sbomix.com Free. MIT.
1
SBOMix
@SBOMixDev
Jun 28
SBOMix is live. SBOM generation is a solved problem. Syft, Trivy ..they work. The unsolved problem is: what do you do with the SBOM after you generate it? That's what we built.
1

SBOMix’s posts