# cyclonedx-python を Homebrew, Nix でインストール cyclonedx-python のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:cyclonedx-python ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install cyclonedx-python ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#cyclonedx-python ``` 証拠: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:cyclonedx-python - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 7.3.1 - **ソース概要:** Creates CycloneDX Software Bill of Materials (SBOM) from Python projects - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** Apache-2.0 - **ソースアーカイブ:** - **最終更新:** 2026-07-24T15:03:48Z - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - cyclonedx-py (cli) - cyclonedx-py (エイリアス) ## 依存関係 - python@3.14 - rpds-py ## macOS 提供ライブラリ - libxml2 - libxslt ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 7.3.1 - マネージャ更新日: 2026-07-24 - ローカルデータ: OK - 上流リポジトリ: https://cyclonedx.org/ - 情報: Release/tag comparison is only available for GitHub repositories. ## プロジェクトの歴史と使われ方 CycloneDX Python is the official CycloneDX SBOM generator for Python projects, manifests, lockfiles, requirements files, and environments. ### プロジェクトの歴史 The cyclonedx-python repository was created in November 2018, shortly after CycloneDX v1.0 introduced a security-focused BOM format. Over time the tool grew from Python dependency SBOM generation into a broader Python packaging surface covering virtual environments, requirements.txt, Poetry, and Pipenv, with older versions retaining support for Python 2.7 while current releases require Python 3.9 or newer. ### 採用の歴史 The README points users to PyPI, pipx, Poetry, uv, Docker, and documentation, and the official tool center lists CycloneDX for Python as an open-source generator. That broad packaging footprint matters because Python SBOMs are often needed from whatever artifact a project already has: an environment, a lockfile, or a requirements file. ### 使われ方 The cyclonedx-py command generates SBOMs from Python virtual environments, requirements files, Pipenv projects, and Poetry projects. It uses CycloneDX Python libraries for data structures, serialization, and validation while keeping its own public surface centered on the CLI. ### パッケージ好きにとっての重要性 For package nerds, cyclonedx-python is where Python packaging diversity meets SBOM standardization: it has to interpret several Python dependency sources while producing a single CycloneDX document suitable for CI, auditing, and vulnerability tooling. ### タイムライン - 2018: Repository created after the first CycloneDX specification release. - 2021: v1.x releases were published under the CycloneDX Python tool line. - 2024: CycloneDX v1.6 became ECMA-424, increasing the standardization backdrop for generators. - 2026: v7.x releases continued support for current Python environments and project formats. ### Related projects - The tool uses the CycloneDX Python library and complements cyclonedx-cli and other language-specific generators in the CycloneDX project. ### ソース - - - - - - ## セキュリティノート cyclonedx-python に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、パッケージメタデータはここに公開されています。 ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cyclonedx-python - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - Nix - cyclonedx-python: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 関連リンク - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://pkg.so/ja/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/ja/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [python@3.14](https://pkg.so/ja/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [cyclonedx-cli](https://pkg.so/ja/brew/cyclonedx-cli/) - Shares the same upstream homepage. - [cyclonedx-gomod](https://pkg.so/ja/brew/cyclonedx-gomod/) - Shares the same upstream homepage. - [cargo-cyclonedx](https://pkg.so/ja/brew/cargo-cyclonedx/) - Shares the same upstream homepage. - [cyclonedx-npm](https://pkg.so/ja/brew/cyclonedx-npm/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [sbom-tool](https://pkg.so/ja/brew/sbom-tool/) - Shares pkgdb curated category or tags: cli, sbom, security, software-supply-chain. - [bomctl](https://pkg.so/ja/brew/bomctl/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [cdxgen](https://pkg.so/ja/brew/cdxgen/) - Shares pkgdb curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [chainloop-cli](https://pkg.so/ja/brew/chainloop-cli/) - Shares pkgdb curated category or tags: cli, sbom, security, software-supply-chain. - [cve-bin-tool](https://pkg.so/ja/brew/cve-bin-tool/) - Shares pkgdb curated category or tags: cli, python, sbom, security, software-supply-chain. ## Combined YAML source View the package source record on GitHub. [combined/cyclonedx-python.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cyclonedx-python.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph