#spdx

ECZ-ID Dependency Security

ecocitizenz

Find dependency, lockfile and SBOM evidence gaps before you rely on them.

ECZ-ID SBOM Readiness

ecocitizenz

Review your software bill-of-materials evidence before you share it.

SBOM Lens

everbright-it

View SPDX and CycloneDX SBOMs, including cascading document hierarchies, right in your editor.

Spring Toolkit AI — Dependency Doctor

SachinKumar

Instant offline dependency analysis for Spring Boot, Maven & Gradle: CVE scanner, version conflict detector, upgrade advisor, license checker, and interactive dependency graph. No internet required.

npm-dependency-manager

noritaka1166

Inspect npm dependencies, export CycloneDX and SPDX SBOMs, find outdated packages, vulnerabilities, licenses, and package-lock details from the VS Code sidebar.

pull-license

nangmanhunter-publisher

Instantly pull any standard license file from SPDX with a single command.

Package License Viewer

otoneko1102

Shows the license of each dependency inline, dimmed at the end of the line in package.json and deno.json.

BuyGit

buygit

License-aware Git asset discovery from inside VS Code — search 78k+ curated repos, check SPDX compatibility, audit dependencies, and see per-dependency license verdicts inline in package.json / Cargo.toml / requirements.txt / go.mod / composer.json / Gemfile.