cra-scan
PulseGate's liveness check found it on 1 Oct 2026; it is registered on GitHub and PyPI and has been in the index since 1 Oct 2026. How this is checked
cra-scan is an open-source command-line tool for Swift and Apple-platform projects. It generates CycloneDX SBOMs and checks dependencies against vulnerability sources to support Cyber Resilience Act reporting.
Inferred · not functionally tested
Overview
6 featuresPurpose: Checking Swift and Apple-platform projects for software-bill-of-materials and exploited-vulnerability reporting requirements.
Inferred · not functionally tested
Audience: Swift and Apple-platform developers
Inferred · not functionally tested
Functions: data_extraction
Inferred · not functionally tested
Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)
Recorded constraints: pricing: open_source · license: Apache-2.0 · platforms: CLI · deployment: cli, self_hosted
Constraint provenance is unknown; confirm requirements with the publisher.
Record sources: pypi.org · github.com. These links do not verify the individual claims.
cra-scan is an Application security & vulnerability scanning project. Inferred · not functionally tested: It focuses on checking Swift and Apple-platform projects for software-bill-of-materials and exploited-vulnerability reporting requirements. Inferred · not functionally tested: cra-scan is an open-source project aimed at swift and Apple-platform developers. Basis unknown · not verified: cra-scan is open source under the Apache-2.0 license. Basis unknown · not verified: It ships for the command line, and it can be self-hosted.
Behind cra-scan is stavrop, and it first shipped in 2026. Development happens publicly on GitHub with 2 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include SBOM generation, cycloneDX output, and swiftPM scanning.
Summary written by a language model from the project’s public pages.
Tasks: Inferred · not functionally tested
- SBOM generation
- CycloneDX output
- SwiftPM scanning
- CocoaPods scanning
- OSV checks
- KEV checks
Topics: Inferred · not functionally tested
Built with & integrations
- Claude Code
- commit 0e6ce36f0605 · since Oct 2026
Trust & compliance
Indexing history
2What PulseGate has recorded for this listing
Frequently asked questions about cra-scan
- What is cra-scan?
- Inferred · not functionally tested: Cra-scan focuses on checking Swift and Apple-platform projects for software-bill-of-materials and exploited-vulnerability reporting requirements. It is catalogued under Application security & vulnerability scanning on PulseGate.
- Who should use cra-scan?
- Inferred · not functionally tested: cra-scan is an open-source project built for swift and Apple-platform developers.
- Is cra-scan free?
- Basis unknown · not verified: Yes — cra-scan is open source under the Apache-2.0 license and free to use.
- What platforms does cra-scan run on?
- Basis unknown · not verified: cra-scan runs on the command line. It can also be self-hosted.
- Is cra-scan still maintained?
- PulseGate's liveness check found it on 1 Oct 2026. Its GitHub repository shows 2 commits in the last 90 days.
- Who makes cra-scan?
- cra-scan is developed by stavrop.
- When did cra-scan launch?
- cra-scan first shipped in 2026.
- Is cra-scan open source?
- Basis unknown · not verified: Yes — cra-scan is open source under the Apache-2.0 license, developed on GitHub.
Similar projects
Closest matches by what these projects do