#sbom

ECZ-ID Dependency Security

ecocitizenz

Find dependency, lockfile and SBOM evidence gaps before you rely on them.

ECZ-ID SBOM Readiness

ecocitizenz

Review your software bill-of-materials evidence before you share it.

ECZ-ID

ecocitizenz

Run the right ECZ-ID trust check for your workspace — agents, MCP, APIs, CI/CD, dependencies, compliance, vendors, SBOM, DORA, cloud, counterparty, robotics and insurance-readiness.

SBOM Lens

everbright-it

View SPDX and CycloneDX SBOMs, including cascading document hierarchies, right in your editor.

npm-dependency-manager

noritaka1166

Inspect npm dependencies, export CycloneDX and SPDX SBOMs, find outdated packages, vulnerabilities, licenses, and package-lock details from the VS Code sidebar.

VDB — AI-aware Dependency Security

opstech

Flags slopsquatting, CVE, and registry risk in your package.json / requirements.txt / pyproject.toml / pom.xml / Cargo.toml / go.mod as you edit — powered by VDB.

OCM Lens

everbright-it

View Open Component Model component versions and deliveries right in your editor: CTF and component archives, with embedded SBOMs.

Capa Language

nelsonduarte

Syntax highlighting and language server client for the Capa programming language

vuln.mlab.sh SBOM scan

mlab-sh

Manually scan lockfiles for known CVEs via vuln.mlab.sh. No automatic scanning; you decide when a lockfile leaves your machine.

Vibgrate

Vibgrate

Your codebase has a number. Now it's in your editor. Local DriftScore — no account, no upload.

ECZ-ID Complete Trust Toolchain

ecocitizenz

The ECZ-ID Hub plus the complete sixteen-specialist estate in one install.

ECZ-ID API & Software Pack

ecocitizenz

API, CI/CD, dependency and SBOM checks for software teams, with the ECZ-ID Hub.