# cyclonedx-python を Homebrew, Nix でインストール

cyclonedx-python のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:cyclonedx-python
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install cyclonedx-python
```

  証拠: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#cyclonedx-python
```

  証拠: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:cyclonedx-python
- **パッケージマネージャ:** Homebrew
- **バージョン:** 7.3.1
- **ソース概要:** Creates CycloneDX Software Bill of Materials (SBOM) from Python projects
- **ホームページ:** <https://cyclonedx.org/>
- **リポジトリ:** <https://github.com/CycloneDX/cyclonedx-python>
- **最終更新:** 2026-07-24T15:03:48Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- cyclonedx-py (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 7.3.1
## プロジェクトの歴史と使われ方

CycloneDX Python is the official CycloneDX SBOM generator for Python projects, manifests, lockfiles, requirements files, and environments.

### プロジェクトの歴史

The cyclonedx-python repository was created in November 2018, shortly after CycloneDX v1.0 introduced a security-focused BOM format. Over time the tool grew from Python dependency SBOM generation into a broader Python packaging surface covering virtual environments, requirements.txt, Poetry, and Pipenv, with older versions retaining support for Python 2.7 while current releases require Python 3.9 or newer.

### 採用の歴史

The README points users to PyPI, pipx, Poetry, uv, Docker, and documentation, and the official tool center lists CycloneDX for Python as an open-source generator. That broad packaging footprint matters because Python SBOMs are often needed from whatever artifact a project already has: an environment, a lockfile, or a requirements file.

### 使われ方

The cyclonedx-py command generates SBOMs from Python virtual environments, requirements files, Pipenv projects, and Poetry projects. It uses CycloneDX Python libraries for data structures, serialization, and validation while keeping its own public surface centered on the CLI.

### パッケージ好きにとっての重要性

For package nerds, cyclonedx-python is where Python packaging diversity meets SBOM standardization: it has to interpret several Python dependency sources while producing a single CycloneDX document suitable for CI, auditing, and vulnerability tooling.

### タイムライン

- 2018: Repository created after the first CycloneDX specification release.
- 2021: v1.x releases were published under the CycloneDX Python tool line.
- 2024: CycloneDX v1.6 became ECMA-424, increasing the standardization backdrop for generators.
- 2026: v7.x releases continued support for current Python environments and project formats.

### Related projects

- The tool uses the CycloneDX Python library and complements cyclonedx-cli and other language-specific generators in the CycloneDX project.

### ソース

- <https://github.com/CycloneDX/cyclonedx-python/blob/main/README.md>
- <https://api.github.com/repos/CycloneDX/cyclonedx-python>
- <https://github.com/CycloneDX/cyclonedx-python/releases>
- <https://cyclonedx-bom-tool.readthedocs.io/>
- <https://cyclonedx.org/tool-center/>
- <https://cyclonedx.org/about/history/>


## セキュリティノート

cyclonedx-python に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。


## 他のパッケージマネージャ記録

- Nix - cyclonedx-python: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/cyclonedx-python.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cyclonedx-python.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
