← All tools
SBOM Inventory Inspector
Explore CycloneDX or SPDX JSON inventories locally, without uploading them.
Inventory aid only: this tool performs structural observations without network requests. It does not query vulnerabilities, verify hashes or signatures, establish provenance/trust, certify license compliance, or prove completeness. License-expression checks are intentionally partial; credential-like URL and purl values are masked in results and exports.
SBOM input
Filters
Summary
Load an SBOM to begin.
Observations
Normalized inventory
| Name | Version | Type | Supplier | Coordinates | Licenses | Hashes / refs | Observations |
|---|
Dependency structure
Graph is capped at the first 80 filtered nodes and 200 connecting edges; use the accessible table for the full normalized inventory.
License summary
External reference hosts
Export normalized data
Exports contain the normalized report and masked URL/purl values, not the original document.