* [Chainloop v1.107.0](https://github.com/chainloop-dev/chainloop) – Evidence store and policy engine for Software Supply Chain attestations, SBOMs, VEX, SARIF, and QA reports.

* [sbomqs v2.0.12](https://github.com/interlynk-io/sbomqs) – Evaluates SBOM quality, validates compliance against standards, analyzes components, and identifies vulnerabilities.

* [CycloneDX SBOM for npm v6.0.1](https://github.com/CycloneDX/cyclonedx-node-npm) – Generate Software Bill of Materials (SBOM) from Node.js npm projects following official standards.

* [sbomasm v2.0.10](https://github.com/interlynk-io/sbomasm) – Comprehensive SBOM lifecycle toolkit for assembling, editing, enriching, removing sensitive data, signing, and viewing SBOMs.