Package
@cyclonedx/cyclonedx-npm
Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.
Key numbers
As of 25 Sept 2026
- Weekly downloads
- 345.1k
- - over 12 months
- Gzip bundle size
- -
- No Bundlephobia data
- Dependencies
- 6
- Direct, from package.json
- Last release
- 1 month ago
- v6.0.1
- GitHub stars
- 150
- 30 forks
- Open issues / PRs
- 14 / 12
- Contributors
- -
- Commits, last 52 weeks
- 115
No weekly download data in the snapshot.
345,098 downloads last week, 1,789,556 in the last month. No 52-week series has been fetched yet.
- Releases, last 12 months
- 857 in total
- Latest version
- 6.0.1, 11 Aug 20261 month ago
- First published
- 20 Aug 2022
- Last push to GitHub
- 19 Sept 20265 days before the snapshot
- Repository archived
- No
- Open issues
- 14
- Open pull requests
- 12
- Commits, last 52 weeks
- 115
- Dependents on npm
- 5
Major versions
- v6 first release 6.0.0, 7 Jul 2026
- v5 first release 5.0.0, 16 Jun 2026
- v4 first release 4.0.0, 23 Jun 2025
- v3 first release 3.0.0, 8 Apr 2025
- v2 first release 2.0.0, 27 Jan 2025
- v1 first release 1.0.0, 24 Sept 2022
Recent releases
| Version | Published |
|---|---|
| 6.0.1 | 11 Aug 2026 |
| 6.0.0 | 7 Jul 2026 |
| 5.0.0 | 16 Jun 2026 |
| 4.2.1 | 9 Mar 2026 |
| 4.2.0 | 3 Mar 2026 |
| 4.1.2 | 5 Dec 2025 |
| 4.1.1 | 11 Nov 2025 |
| 4.1.0 | 29 Oct 2025 |
| 4.0.3 | 22 Sept 2025 |
| 4.0.2 | 16 Sept 2025 |
| 4.0.1 | 4 Sept 2025 |
| 4.0.0 | 23 Jun 2025 |
| 3.1.0 | 16 Jun 2025 |
| 3.0.0 | 8 Apr 2025 |
- Module format
- CommonJSFrom package.json type, main and exports fields
- TypeScript types
- None
- Node.js engine range
- >=20.18.0
- Runtimes
- -
- Unpacked size (npm)
- 86 kB
- Dependencies (6)
commanderxmlbuilder2packageurl-jsspdx-expression-parsenormalize-package-data@cyclonedx/cyclonedx-library
npm install @cyclonedx/cyclonedx-npm- jsDelivr
https://cdn.jsdelivr.net/npm/@cyclonedx/cyclonedx-npm@6.0.1/ - unpkg
https://unpkg.com/@cyclonedx/cyclonedx-npm@6.0.1/ - esm.sh
https://esm.sh/@cyclonedx/cyclonedx-npm@6.0.1
Indexability: Indexed.