CycloneDX Software Bill of Materials (SBOM) Component Auditor

Audits CycloneDX JSON SBOM component lists for valid purl (package URL) identifiers and version strings.

Notice: engineering verification utility. Use test or de-identified data and verify results independently before relying on them.

INPUT: Component names and versions comma-separated, one per line

How it works

Standard: OWASP CycloneDX Standard v1.4/v1.5

Formula: Verify presence of component name, version, and valid purl format (pkg:type/name@version)

Checks: Valid JSON array of software components

Calculated locally in browser memory; nothing leaves your browser.

Deterministic local-first client-side execution. Provided as-is without warranty.