Lib4sbom

Latest version: v0.8.1

Safety actively analyzes 693883 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 5

0.8.1

Updates in this release
Fixes
- chore: bump version
- fix: Ensure consistency of reference category for Package-Manager
- fix: Handle None as licence expression (fixes 61)

0.8.0

Updates in this release
New features
- feat: add built date support for package component
- feat: add composition date item
- feat: handle custom vulnerability attributes (fixes 56)
- feat: include OTHER external references
- feat: raise user defined exception if parsing error (fixes 59)
- feat: update license test files(fixes 52)
- feat: validate external reference categories
Fixes
- chore: fix max line length
- chore: linting
- doc: Update README (fixes 54)
- fix: Allow empty license name in CycloneDX XML
- fix: BuiltDate should be ReleaseDate
- fix: Checksum algorithm validation
- fix: Ensure license list version is of format M.N
- fix: Handle file as source of relationship (fixes 50)
- fix: Handle multiple licenses (fixes 45)
- fix: Handle source of vulnerability
- fix: Handle zero length strings
- fix: Handling non-semantic versions

- Merge pull request 58 from raboof/allow-empty-license-name

0.7.5

Updates in this release
Fixes
- chore: bump version
- fix: Handle empty file
- fix: Improve handling of invalid JSON files
- fix: Naming of file comment
- fix: SPDX validation (fixes 51)

0.7.4

Updates in this release
Fixes
- fix: add debug to CycloneDX parser
- fix: license handling
- fix: support mixed case email addresses
- fix: typo in organization

0.7.3

Updates in this release
Fixes
- chore: bump version
- fix: SBOM spec version validation (fixes 48)
- fix: storage of uuid
- fix: Typo in checksumValue (fixes 47)

0.7.2

Updates in this release
New features
- feat: Add acknowledgement for license parsing
- feat: Add check for features introduced in CycloneDX 1.6
- feat: Additional category support for external references to support CycloneDX 1.6
- feat: Add licence acknowledgement for CycloneDX 1.6
- feat: Add remediation details
- feat: Extract component name and version for vulnerability
- feat: Get list of licenses
- feat: Handle user defined licenses
- feat: Handle user defined llicenses and preserve ids
- feat: Multiple licenses from CycloneDX files preserved by parser
- feat: Support for non SPDX licenses
- feat: Update CycloneDX licence parsing
- feat: Validate hash algorithm
Fixes
- doc: fix typo
- doc: minor doc updates
- fix: Allow non semantic version numbers
- fix: Author in metadata
- fix: Fix small typo in cyclonedx_parser.
- fix: Generation of lifecycle
- fix: Handle empty license
- fix: Handle legacy tools interface (fixes 43)
- fix: Handling of CycloneDX 1.6 specific attributes
- fix: Handling of lifecycle
- fix: Identify supplier in component
- fix: Linting
- fix: Metadata parsing of authors
- fix: Parsing of CycloneDX vulnerability
- fix: Process supplier URL
- fix: Set default vulnerability status appropriate to type
- fix: SPDX handling of user defined licenses
- fix: Supplier handling of component
- fix: Typo in attribute
- fix: Type filesAnaylzed -> filesAnalyzed
- fix: Typo in lifecycle element
- fix: Typo preventing generating correct copyright
- fix: Updated validation of SBOM
- fix: Update license types
- fix: Update service component processing
- fix: Update vulnerability handling for CycloneDX
- fix: Validate external reference category

Merge pull request 37 from nodet/typo
Merge pull request 39 from nodet/fix-copyright-text
Merge pull request 40 from georgkoester/typo-correction-set-content
Merge pull request 42 from georgkoester/multi-license-pr

Page 1 of 5

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.