# Install cyclonedx-python with Homebrew, Nix Creates CycloneDX Software Bill of Materials (SBOM) from Python projects. Version 7.3.0 via Homebrew; verified 2026-05-20. ## Install ```sh sudo av install brew:cyclonedx-python ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install cyclonedx-python ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#cyclonedx-python ``` Evidence: nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:cyclonedx-python - **Package manager:** Homebrew - **Package manager page:** - **Version:** 7.3.0 - **Source summary:** Creates CycloneDX Software Bill of Materials (SBOM) from Python projects - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-05-20T13:14:54Z - **Generated:** 2026-07-09T07:20:21+00:00 ## Executables - cyclonedx-py (cli) - cyclonedx-py (alias) ## Dependencies - python@3.14 - rpds-py ## Uses from macOS - libxml2 - libxslt ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-09 - Package-manager version: 7.3.0 - Package-manager updated: 2026-05-20 - Local data: ok - Upstream repository: https://cyclonedx.org/ - info: Release/tag comparison is only available for GitHub repositories. ## Project history and usage CycloneDX Python is the official CycloneDX SBOM generator for Python projects, manifests, lockfiles, requirements files, and environments. ### Project history The cyclonedx-python repository was created in November 2018, shortly after CycloneDX v1.0 introduced a security-focused BOM format. Over time the tool grew from Python dependency SBOM generation into a broader Python packaging surface covering virtual environments, requirements.txt, Poetry, and Pipenv, with older versions retaining support for Python 2.7 while current releases require Python 3.9 or newer. ### Adoption history The README points users to PyPI, pipx, Poetry, uv, Docker, and documentation, and the official tool center lists CycloneDX for Python as an open-source generator. That broad packaging footprint matters because Python SBOMs are often needed from whatever artifact a project already has: an environment, a lockfile, or a requirements file. ### How it is used The cyclonedx-py command generates SBOMs from Python virtual environments, requirements files, Pipenv projects, and Poetry projects. It uses CycloneDX Python libraries for data structures, serialization, and validation while keeping its own public surface centered on the CLI. ### Why package nerds care For package nerds, cyclonedx-python is where Python packaging diversity meets SBOM standardization: it has to interpret several Python dependency sources while producing a single CycloneDX document suitable for CI, auditing, and vulnerability tooling. ### Timeline - 2018: Repository created after the first CycloneDX specification release. - 2021: v1.x releases were published under the CycloneDX Python tool line. - 2024: CycloneDX v1.6 became ECMA-424, increasing the standardization backdrop for generators. - 2026: v7.x releases continued support for current Python environments and project formats. ### Related projects - The tool uses the CycloneDX Python library and complements cyclonedx-cli and other language-specific generators in the CycloneDX project. ### Sources - - - - - - ## Security Notes No matching local secret-handling manifest was found for cyclonedx-python. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** cyclonedx-python - **Version Scheme:** 0 - **Revision:** 2 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - cyclonedx-python: normalized package name match | nixpkgs package indexes: pkgs/by-name/cy/cyclonedx-python/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Related links - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [cargo-cyclonedx](https://www.automicvault.com/pkg/brew/cargo-cyclonedx/) - Shares the same upstream homepage. - [cyclonedx-cli](https://www.automicvault.com/pkg/brew/cyclonedx-cli/) - Shares the same upstream homepage. - [cyclonedx-gomod](https://www.automicvault.com/pkg/brew/cyclonedx-gomod/) - Shares the same upstream homepage. - [tern](https://www.automicvault.com/pkg/brew/tern/) - Shares av.db curated category or tags: cli, cyclonedx, python, sbom, security. - [sbom-tool](https://www.automicvault.com/pkg/brew/sbom-tool/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [cdxgen](https://www.automicvault.com/pkg/brew/cdxgen/) - Shares av.db curated category or tags: cli, cyclonedx, sbom, security, software-supply-chain. - [chainloop-cli](https://www.automicvault.com/pkg/brew/chainloop-cli/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [syft](https://www.automicvault.com/pkg/brew/syft/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. - [bom](https://www.automicvault.com/pkg/brew/bom/) - Shares av.db curated category or tags: cli, sbom, security, software-supply-chain. ## Combined YAML source View the package source record on GitHub. [combined/cyclonedx-python.yml](https://github.com/automic-vault/db/blob/main/combined/cyclonedx-python.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph