Skip to content
Back to the index

cra-sentinel

PyPIInfrastructure

PulseGate's liveness check found it on 13 Sep 2026; it is registered on GitHub and PyPI and has been in the index since 13 Sep 2026. How this is checked

cra-sentinel is an MIT-licensed command-line scanner for EU Cyber Resilience Act compliance. It generates SBOMs, detects actively exploited vulnerabilities, and supports Article 14 evidence workflows using software security formats.

Inferred · not functionally tested

Open SourceMITCLISelf-hosted
Visit PyPI

Overview

6 features

Purpose: Assessing software compliance with the EU Cyber Resilience Act and producing required security evidence.

Inferred · not functionally tested

Audience: software security and compliance teams

Inferred · not functionally tested

Functions: data_extraction

Inferred · not functionally tested

Interfaces: API: unknown · MCP: unknown · CLI: indicated (inferred, not tested) · Self-hosting: indicated (inferred, not tested)

Recorded constraints: pricing: open_source · license: MIT · platforms: CLI · deployment: cli, self_hosted

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: pypi.org · github.com. These links do not verify the individual claims.

cra-sentinel sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on assessing software compliance with the EU Cyber Resilience Act and producing required security evidence. Inferred · not functionally tested: cra-sentinel is an open-source project aimed at software security and compliance teams. Basis unknown · not verified: cra-sentinel is open source under the MIT license. Basis unknown · not verified: cra-sentinel is available on the command line, and it can be self-hosted.

It is developed by Tom Vallat, and it first shipped in 2026. Development happens publicly on GitHub with 9 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include SBOM generation, vulnerability detection, and actively exploited detection.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • SBOM generation
  • Vulnerability detection
  • Actively exploited detection
  • Article 14 evidence
  • CycloneDX support
  • SPDX support

Topics: Inferred · not functionally tested

Tags
eu-cyber-resilience-actsbom-scanningvulnerability-detectionarticle-14-evidence

JSON profile · Text profile · Access guide

Built with & integrations

Runs on
CLISelf-hosted

Trust & compliance

License
MIT
Public signals
HTTPSOpen SourceFree tierGitHubActive maintenance

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed13 Sep · 18:13 UTC
    cra-sentinel seen via PyPI Bulk Enumerator
    Source: PyPI Bulk Enumerator · Open

Frequently asked questions about cra-sentinel

What does cra-sentinel do?
Inferred · not functionally tested: Cra-sentinel focuses on assessing software compliance with the EU Cyber Resilience Act and producing required security evidence. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who is cra-sentinel for?
Inferred · not functionally tested: cra-sentinel is an open-source project built for software security and compliance teams.
Does cra-sentinel have a free plan?
Basis unknown · not verified: Yes — cra-sentinel is open source under the MIT license and free to use.
What platforms does cra-sentinel run on?
Basis unknown · not verified: cra-sentinel runs on the command line. It can also be self-hosted.
Is cra-sentinel still active?
PulseGate's liveness check found it on 13 Sep 2026. Its GitHub repository shows 9 commits in the last 90 days.
What projects are similar to cra-sentinel?
Similar projects tracked by PulseGate include cra-scope, cra-scan, and CRA Evidence.cra-scopecra-scanCRA Evidence
Who develops cra-sentinel?
cra-sentinel is developed by Tom Vallat.
When did cra-sentinel launch?
cra-sentinel first shipped in 2026.

Similar projects

Closest matches by what these projects do