Skip to content
Back to the index

WpBom

wordpress.orgApplication security & vulnerability scanning

PulseGate's liveness check found it on 19 Sep 2026; it is registered on GitHub and WordPress.org and has been in the index since 25 Jun 2026. How this is checked

WpBom is an open-source WordPress plugin that generates software bills of materials in OWASP CycloneDX JSON format. It supports automatic and manual submission to Dependency-Track and provides a downloadable BOM.

Inferred · not functionally tested

FreeMITWebCloud-managed
WpBom preview
Visit wordpress.org
2.8kstars
518forks
6features
2011since

Overview

6 features

Purpose: Generating and submitting WordPress software bills of materials for dependency security tracking.

Inferred · not functionally tested

Audience: WordPress developers and security teams

Inferred · not functionally tested

Functions: data_extraction

Inferred · not functionally tested

Interfaces: API: unknown · MCP: unknown · CLI: unknown · Self-hosting: unknown

Recorded constraints: pricing: free · license: MIT · platforms: WEB · deployment: browser, cloud_managed

Constraint provenance is unknown; confirm requirements with the publisher.

Record sources: wordpress.org · wordpress.org · github.com. These links do not verify the individual claims.

WpBom sits in PulseGate's Application security & vulnerability scanning category. Inferred · not functionally tested: It focuses on generating and submitting WordPress software bills of materials for dependency security tracking. Inferred · not functionally tested: WpBom is an open-source project aimed at wordPress developers and security teams. Basis unknown · not verified: It is available for free. Basis unknown · not verified: It runs on the web.

Vitor Guia builds and maintains WpBom, and it first shipped in 2011. The project is developed in the open on GitHub with 2.8k stars and 29 commits in the last 90 days. Inferred · not functionally tested: Key capabilities include Automatic BOM submission, Manual BOM submission, and CycloneDX JSON export. The interface is available in English, Dutch, and Chinese. It is being sunset.

Summary written by a language model from the project’s public pages.

Tasks: Inferred · not functionally tested

  • Automatic BOM submission
  • Manual BOM submission
  • CycloneDX JSON export
  • Dependency-Track integration
  • BOM download
  • WordPress integration

Topics: Inferred · not functionally tested

Tags
wordpress-pluginsbom-generationcyclonedxdependency-track

JSON profile · Text profile · Access guide

Built with & integrations

Runs on
BrowserCloud-managed

Trust & compliance

License
MIT
Public signals
HTTPSPrivacy PolicyFree tierGitHub · ★ 2.8kActive maintenanceMulti-language
Legal
Privacy Policy

Indexing history

1

What PulseGate has recorded for this listing

  1. Indexed18 Sep · 06:05 UTC
    WpBom seen via WordPress Plugins
    Source: WordPress Plugins · Open

Frequently asked questions about WpBom

What does WpBom do?
Inferred · not functionally tested: WpBom focuses on generating and submitting WordPress software bills of materials for dependency security tracking. It is catalogued under Application security & vulnerability scanning on PulseGate.
Who should use WpBom?
Inferred · not functionally tested: WpBom is an open-source project built for wordPress developers and security teams.
Does WpBom have a free plan?
Basis unknown · not verified: Yes — WpBom is free to use.
What platforms does WpBom run on?
Basis unknown · not verified: WpBom runs on the web.
Is WpBom still maintained?
It is being sunset according to the latest indexed signals.
What projects are similar to WpBom?
Similar projects tracked by PulseGate include RSS Reply via email, wp_mail return-path, and Comment Reply Email.RSS Reply via emailwp_mail return-pathComment Reply Email
Who makes WpBom?
WpBom is developed by Vitor Guia.
How long has WpBom been around?
WpBom first shipped in 2011.

Similar projects

Closest matches by what these projects do