Who should use sbomdrift?

sbomdrift is an open-source project built for developers.

Does sbomdrift have a free plan?

Yes — sbomdrift is open source under the Apache-2.0 license and free to use.

What platforms does sbomdrift run on?

sbomdrift runs on the command line.

Is sbomdrift still maintained?

The GitHub repository shows 8 commits in the last 90 days.

What projects are similar to sbomdrift?

Similar projects tracked by PulseGate include Track Debug, ZenPress, and StarPulse.

Who develops sbomdrift?

sbomdrift is developed by EngineerSamet.

How long has sbomdrift been around?

sbomdrift first shipped in 2026.

Back to the index

sbomdrift

Name: sbomdrift
Author: EngineerSamet

PyPIInfrastructure

sbomdrift is a Python tool that analyzes Software Bill of Materials (SBOM) files in CycloneDX or SPDX format to track how their vulnerability posture evolves over time. It identifies newly vulnerable components by comparing against prior scans using OSV data. Designed for supply-chain security workflows, it helps developers and security teams monitor drift in open-source dependencies.

Open SourceApache-2.0CLI

Visit PyPI

Overview

5 features

In the Developer Tools space, sbomdrift takes a focused approach. It focuses on detecting and tracking how the vulnerability exposure of software bill of materials changes between scans. It is built as an open-source project for developers. The project is open source (Apache-2.0). sbomdrift is available on the command line.

Behind sbomdrift is EngineerSamet, and it first shipped in 2026. Development happens publicly on GitHub with 8 commits in the last 90 days. Key capabilities include SBOM vulnerability tracking, cycloneDX support, and SPDX support.

Summary written by a language model from the project’s public pages.

SBOM vulnerability tracking
CycloneDX support
SPDX support
OSV integration
Drift detection

Built with & integrations

Runs on

CLI

Trust & compliance

License

Apache-2.0

Verified signals

HTTPSOpen Source GitHubActive maintenance

Indexing history

What PulseGate has recorded for this listing

Indexed24 Jul · 14:17 UTC
sbomdrift verified against its public source
Source: PulseGate · Open

Frequently asked questions about sbomdrift

What does sbomdrift do?: Sbomdrift focuses on detecting and tracking how the vulnerability exposure of software bill of materials changes between scans. It is catalogued under Developer Tools on PulseGate.
Who should use sbomdrift?: sbomdrift is an open-source project built for developers.
Does sbomdrift have a free plan?: Yes — sbomdrift is open source under the Apache-2.0 license and free to use.
What platforms does sbomdrift run on?: sbomdrift runs on the command line.
Is sbomdrift still maintained?: The GitHub repository shows 8 commits in the last 90 days.
What projects are similar to sbomdrift?: Similar projects tracked by PulseGate include Track Debug, ZenPress, and StarPulse.Track Debug ZenPress StarPulse
Who develops sbomdrift?: sbomdrift is developed by EngineerSamet.
How long has sbomdrift been around?: sbomdrift first shipped in 2026.

At a glance

Platforms: Cli
Languages: English
Open source: Yes (GitHub)
License: Apache-2.0
First seen: 24 Jul 2026
Built for: developers
Model: Open source
Solves: Detecting and tracking how the vulnerability exposure of software bill of materials changes between scans.

Registered as

GitHub: EngineerSamet/sbomdrift
PyPI: sbomdrift

Developer

EngineerSamet

Solo developer

GitHub

Open source

View on GitHub

Stars: 0
Forks: 0
Open issues: 0
Last commit: 24 Jul 2026
Commits 90d: 8
Contributors: 1
Authorship: Solo
Default branch: main
Latest release: v0.1.0 · 24 Jul 2026

Live coverage

Identity confidence: Low · 64
Indexed: 24 Jul 2026
Lifecycle: Alive
First seen: Jul 2026
Last seen: 24 Jul 2026

Identity audit (13)

Slug: sbomdrift-pypi-org
Lifecycle state recorded: 24 Jul 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 24 Jul 2026
Timeline basis: Indexed-at chronology (no inferred launch/funding milestones).
Name from: Written by a language model from the project's public pages.
Category from: Assigned by a language model.
Summary from: Written by a language model from public pages.
Languages from: Detected by a language model from page content.
Last updated: 5 Aug 2026
Canonical URL: https://pypi.org/project/sbomdrift

Ship this? Send a correction — no account, and you get a link to follow it.

Also in Developer Tools

Same category — not a similarity match