sbomtriageExample
Example workspace. A real scan of a polyglot monorepo with 20 real packages across npm, PyPI, Go, Cargo, NuGet and RubyGems, saved on 2026-09-30. It’s read-only, so nothing here changes a real project.Scan your own software

example-monorepo

grade C · last checked 5 days ago · 1 recent history entry
Example report
20Components
20Could be matched
100%Coverage · high confidence
0Never checked
20 of 20
ComponentEcosystemWhereFindingsWorst
django
3.2.0 · unknown
pypicdx-mixed-ecosystems.json37Fix now
nokogiri
1.11.0 · unknown
gemcdx-mixed-ecosystems.json33Fix now
rack
2.2.3 · unknown
gemcdx-mixed-ecosystems.json32Fix soon
axios
0.21.1 · unknown
npmcdx-mixed-ecosystems.json24Fix soon
openssl
0.10.38 · unknown
cargocdx-mixed-ecosystems.json13Fix soon
urllib3
1.25.8 · unknown
pypicdx-mixed-ecosystems.json11Fix soon
jinja2
2.11.2 · unknown
pypicdx-mixed-ecosystems.json5Fix soon
requests
2.19.0 · unknown
pypicdx-mixed-ecosystems.json5Fix soon
lodash
4.17.15 · unknown
npmcdx-mixed-ecosystems.json4Fix soon
github.com/gin-gonic/gin
v1.6.3 · unknown
golangcdx-mixed-ecosystems.json3Fix soon
ws
7.4.5 · unknown
npmcdx-mixed-ecosystems.json3Fix soon
ejs
3.1.6 · unknown
npmcdx-mixed-ecosystems.json2Fix soon
golang.org/x/text
v0.3.7 · unknown
golangcdx-mixed-ecosystems.json2Fix soon
Newtonsoft.Json
12.0.3 · unknown
nugetcdx-mixed-ecosystems.json1Fix soon
pyyaml
5.3.1 · unknown
pypicdx-mixed-ecosystems.json1Fix soon
smallvec
1.6.0 · unknown
cargocdx-mixed-ecosystems.json1Fix soon
System.Text.Encodings.Web
4.7.1 · unknown
nugetcdx-mixed-ecosystems.json1Fix soon
traverse
7.20.0 · unknown
npmcdx-mixed-ecosystems.json1Fix soon
time
0.1.44 · unknown
cargocdx-mixed-ecosystems.json1Monitor
github.com/dgrijalva/jwt-go
v3.2.0 · unknown
golangcdx-mixed-ecosystems.json1No fix