Who should use opencra?

opencra is an open-source project built for devSecOps and software security teams.

Does opencra have a free plan?

Yes — opencra is open source under the Apache-2.0 license and free to use.

What platforms does opencra run on?

opencra runs on the command line. It can also be self-hosted.

Is opencra still maintained?

Unverified. opencra has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.

What projects are similar to opencra?

Similar projects tracked by PulseGate include ByteGuard, Dual Condition, and CVEFeed.io.

Is opencra open source?

Yes — opencra is open source under the Apache-2.0 license.

Back to the index

opencra

PyPIInfrastructure

opencra is an Apache-2.0 Python package for assessing Cyber Resilience Act Article 14 reporting readiness from software bills of materials. It uses vulnerability and security data to help DevSecOps teams identify issues that may start a 24-hour reporting clock.

Open SourceApache-2.0CLISelf-hosted

Visit PyPI

Overview

7 features

In the Application security & vulnerability scanning space, opencra takes a focused approach. It focuses on determining which SBOM vulnerabilities trigger the Cyber Resilience Act's 24-hour reporting requirement. It is built as an open-source project for devSecOps and software security teams. The project is open source (Apache-2.0). It runs on the command line, and it can be self-hosted.

opencra first shipped in 2026. Among its 7 catalogued features are SBOM analysis, CRA assessment, and vulnerability matching.

Summary written by a language model from the project’s public pages.

SBOM analysis
CRA assessment
Vulnerability matching
CISA KEV checks
CycloneDX support
OSV support
Compliance reporting

Built with & integrations

Runs on

CLISelf-hosted

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen Source

Indexing history

What PulseGate has recorded for this listing

Indexed10 Sept · 03:04 UTC
opencra verified via PyPI Bulk Enumerator
Source: PyPI Bulk Enumerator · Open

Frequently asked questions about opencra

What is opencra?: Opencra focuses on determining which SBOM vulnerabilities trigger the Cyber Resilience Act's 24-hour reporting requirement. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who should use opencra?: opencra is an open-source project built for devSecOps and software security teams.
Does opencra have a free plan?: Yes — opencra is open source under the Apache-2.0 license and free to use.
What platforms does opencra run on?: opencra runs on the command line. It can also be self-hosted.
Is opencra still maintained?: Unverified. opencra has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
What projects are similar to opencra?: Similar projects tracked by PulseGate include ByteGuard, Dual Condition, and CVEFeed.io.ByteGuard Dual Condition CVEFeed.io
How long has opencra been around?: opencra first shipped in 2026.
Is opencra open source?: Yes — opencra is open source under the Apache-2.0 license.

At a glance

Platforms: CLI
Languages: English
License: Apache-2.0
First seen: 10 Sept 2026
Built for: DevSecOps and software security teams
Model: Open source
Solves: Determining which SBOM vulnerabilities trigger the Cyber Resilience Act's 24-hour reporting requirement.

Registered as

PyPI: opencra

Developer

Codelancaster

Index record

Indexed: 10 Sept 2026
Lifecycle: Alive
First seen: Sept 2026
Last seen: 10 Sept 2026

Identity audit (13)

Slug: opencra-pypi-org
Lifecycle state recorded: 10 Sept 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 10 Sept 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 10 Sept 2026
Canonical URL: https://pypi.org/project/opencra

Ship this? Send a correction — no account, and you get a link to follow it.

Also in Application security & vulnerability scanning

Same category — not a similarity match