meta_package_manager.sbom package¶
Export the installed-package inventory as Software Bill of Materials documents.
This subpackage is the home of every SBOM-flavored writer in mpm. Its
existence mirrors the optional [sbom-offline] install extra defined in
pyproject.toml: a default pip install meta-package-manager does not
pull cyclonedx-python-lib or spdx-tools, so the format modules guard
their heavy imports with try/except and expose
spdx_support / cyclonedx_support flags that callers check before
instantiating the rendering classes.
Import from the named modules directly: the format-agnostic base class and
export-format enum from meta_package_manager.sbom.base, the writers
and their support flags from meta_package_manager.sbom.spdx and
meta_package_manager.sbom.cyclonedx.
Submodules¶
meta_package_manager.sbom.basemodulemeta_package_manager.sbom.cyclonedxmodulemeta_package_manager.sbom.spdxmodulemeta_package_manager.sbom.vulnerabilitiesmoduleOSV_BASE_URLOSV_ADVISORY_URLOSV_BATCH_LIMITVULN_DETAIL_TTLOSV_ECOSYSTEMSVulnerabilityVulnerability.idVulnerability.sourceVulnerability.summaryVulnerability.descriptionVulnerability.severityVulnerability.cvss_vectorVulnerability.cwe_idsVulnerability.aliasesVulnerability.referencesVulnerability.fixed_versionsVulnerability.published_dateVulnerability.modified_dateVulnerability.advisory_url
scan_vulnerabilities()