Cyclonedx-python-lib

Latest version: v9.1.0

Safety actively analyzes 723144 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 6 of 19

7.0.0

Breaking

* feat!: Support for CycloneDX v1.6

* added draft v1.6 schemas and boilerplate for v1.6

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* re-generated test snapshots for v1.6

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* note `bom.metadata.manufacture` as deprecated

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* work on `bom.metadata` for v1.6

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* Deprecated `.component.author`. Added `.component.authors` and `.component.manufacturer`

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* work to add `.component.omniborid` - but tests deserialisation tests fail due to schema differences (`.component.author` not in 1.6)

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* work to get deserialization tests passing

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* chore(deps): bump `py-serializable` to >=1.0.3 to resolve issues with deserialization to XML

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* imports tidied

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* properly added `.component.swhid`

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* add `.component.cryptoProperties` - with test failures for SchemaVersion < 1.6

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* typing and bandit ignores

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* coding standards

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* test filtering

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* coding standards

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* additional tests to increase code coverage

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* corrected CryptoMode enum

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* coding standards

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* Added `address` to `organizationalEntity`

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* Added `address` to `organizationalEntity`

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* raise `UserWarning` in `.component.version` has length > 1024

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* coding standards and typing

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* add `acknowledgement` to `LicenseExpression` (582)


Signed-off-by: Paul Horton <paul.hortonowasp.org>

* more proper way to filter test cases

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* update schema to published versions

Signed-off-by: Paul Horton <paul.hortonowasp.org>

* fetch schema 1.6 JSON

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* fetch test data for CDX 1.6

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* reformat

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* reformat

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* refactor

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* style

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* refactor

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

* docs

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>

---------

Signed-off-by: Paul Horton <paul.hortonowasp.org>
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Co-authored-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`8bbdf46`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/8bbdf461434ab66673a496a8305c2878bf5c88da))

6.4.4

Fix

* fix: wrong extra name for xml validation (571)



Signed-off-by: Christoph Reiter <reiter.christophgmail.com> ([`10e38e2`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/10e38e25095de4b2dafbfcd1fd81dce7a9c0f124))

6.4.3

Fix

* fix: serialization of `model.component.Diff` (557)

Fixes 556

---------

Signed-off-by: rcross-lc <151086351+rcross-lcusers.noreply.github.com>
Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com>
Co-authored-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`22fa873`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/22fa8734bf1a3a8789ad7578bfa0c86cf0a49d4a))

6.4.2

Build

* build: use poetry v1.8.1 (560)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`6f81dfa`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/6f81dfaed32b76f251647f6291791e714ab158a3))

Documentation

* docs: update architecture description and examples (550)



Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`a19fd28`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/a19fd2828355ae031164ef7a0dda2a8ea2365108))

* docs: exclude internal docs from rendering (545)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`7e55dfe`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/7e55dfe213cb2a88b3686f9e8bf93cf4642a2ccd))

Unknown

* docs

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`63cff7e`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/63cff7ee697c9d5fb96da3c8c16f7c9bc7b34e58))

* docs (546)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`b0e5b43`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/b0e5b43880e17ec6ce23d5d4e1e7a9a2547c1e79))

6.4.1

Documentation

* docs: ship docs with `sdist` build (544)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`52ef01c`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/52ef01c99319d5aed950e7f6ef6fcfe731ac8b2f))

* docs: refactor example

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`c1776b7`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/c1776b718b81cf72ef0c0251504e0d3631e30b17))

Fix

* fix: `model.BomRef` no longer equal to unset peers (543)

fixes [539](https://github.com/CycloneDX/cyclonedx-python-lib/issues/539)


---------

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`1fd7fee`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/1fd7fee9dec888c10087921f2e5a7a60062fb419))

6.4.0

Documentation

* docs: add OpenSSF Best Practices shield (532)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`59c4381`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/59c43814b07db0aa881d87192939eb93e79b0cc2))

Feature

* feat: support `py-serializable` v1.0 (531)

Signed-off-by: Jan Kowalleck <jan.kowalleckgmail.com> ([`e1e7277`](https://github.com/CycloneDX/cyclonedx-python-lib/commit/e1e72777d8a355c6854f4d9eb26c1e2083c806df))

Page 6 of 19

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.