# cyclonedx-python mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für cyclonedx-python in AI-Agent-Workflows.

## Installation

```sh
sudo av install brew:cyclonedx-python
```

Weitere Installationsbefehle:

### macOS

- Homebrew (100%):

```sh
brew install cyclonedx-python
```

  Evidenz: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#cyclonedx-python
```

  Evidenz: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Paketfakten

- **Paketschlüssel:** brew:cyclonedx-python
- **Paketmanager:** Homebrew
- **Version:** 7.3.1
- **Quellzusammenfassung:** Creates CycloneDX Software Bill of Materials (SBOM) from Python projects
- **Homepage:** <https://cyclonedx.org/>
- **Repository:** <https://github.com/CycloneDX/cyclonedx-python>
- **Zuletzt aktualisiert:** 2026-07-24T15:03:48Z
- **Generiert:** 2026-08-03T19:37:03+00:00

## Executables

- cyclonedx-py (Alias)

## Installationsverhalten

- Bottle: nicht verfügbar

## Version und Aktualität

- Seite generiert: 2026-08-03
- Manager-Version: 7.3.1
## Projektgeschichte und Nutzung

CycloneDX Python is the official CycloneDX SBOM generator for Python projects, manifests, lockfiles, requirements files, and environments.

### Projektgeschichte

The cyclonedx-python repository was created in November 2018, shortly after CycloneDX v1.0 introduced a security-focused BOM format. Over time the tool grew from Python dependency SBOM generation into a broader Python packaging surface covering virtual environments, requirements.txt, Poetry, and Pipenv, with older versions retaining support for Python 2.7 while current releases require Python 3.9 or newer.

### Adoptionsgeschichte

The README points users to PyPI, pipx, Poetry, uv, Docker, and documentation, and the official tool center lists CycloneDX for Python as an open-source generator. That broad packaging footprint matters because Python SBOMs are often needed from whatever artifact a project already has: an environment, a lockfile, or a requirements file.

### Wie es verwendet wird

The cyclonedx-py command generates SBOMs from Python virtual environments, requirements files, Pipenv projects, and Poetry projects. It uses CycloneDX Python libraries for data structures, serialization, and validation while keeping its own public surface centered on the CLI.

### Warum Paket-Nerds sich dafür interessieren

For package nerds, cyclonedx-python is where Python packaging diversity meets SBOM standardization: it has to interpret several Python dependency sources while producing a single CycloneDX document suitable for CI, auditing, and vulnerability tooling.

### Zeitleiste

- 2018: Repository created after the first CycloneDX specification release.
- 2021: v1.x releases were published under the CycloneDX Python tool line.
- 2024: CycloneDX v1.6 became ECMA-424, increasing the standardization backdrop for generators.
- 2026: v7.x releases continued support for current Python environments and project formats.

### Related projects

- The tool uses the CycloneDX Python library and complements cyclonedx-cli and other language-specific generators in the CycloneDX project.

### Quellen

- <https://github.com/CycloneDX/cyclonedx-python/blob/main/README.md>
- <https://api.github.com/repos/CycloneDX/cyclonedx-python>
- <https://github.com/CycloneDX/cyclonedx-python/releases>
- <https://cyclonedx-bom-tool.readthedocs.io/>
- <https://cyclonedx.org/tool-center/>
- <https://cyclonedx.org/about/history/>


## Sicherheitshinweise

Für cyclonedx-python wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.


## Andere Paketmanager-Einträge

- Nix - cyclonedx-python: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/cyclonedx-python.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cyclonedx-python.yml)


## Quellen

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph