Skip to content

SBOM-TOOL is a ctl tool that generates software bill of materials (SBOM) for software projects through source code warehouse, code fingerprint, construction environment, artifact information, artifact content, dependency construction and other dimensional information.

active 2024-03-042026-06-02 (UTC)

Complete coverage26,615 / 26,615 hourly files (100%) · 2 absent upstream2023-08-152026-08-27 (UTC)
Events
38
Pushes
4
Pull requests
3
Issues
2
Stars
19
Forks
4

Activity over time

Daily event counts in the loaded window

Line chart, 821 days from 2024-03-04 to 2026-06-02. Pushes: 4 total, peak 2 in a day. Pull requests: 3 total, peak 2 in a day. Issues: 2 total, peak 1 in a day. Comments: 1 total, peak 1 in a day. Stars: 19 total, peak 6 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
tk1033314310
jdtdevops2110
jarrodlombardo-EventBase2010
sebsnyk1000
thst914421001

Recent activity

Latest issues, pull requests and releases

  • Issue comment#4thst914422025-11-11 11:51
    SPDX JSON created should contain a lowercase `PURL` key
  • Issue#4sebsnyk2024-08-16 12:59
    SPDX JSON created should contain a lowercase `PURL` key
  • Pull request#3jarrodlombardo-EventBase2024-05-27 21:26
  • Issue#2jarrodlombardo-EventBase2024-05-27 21:22
    Gradle Dependency Tree Parser misses packages.
  • Pull request#1jdtdevops2024-03-05 11:30
  • Pull request#1tk1033312024-03-05 11:29

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 19 stars here means stars gained during the window, not the repo's star count.