SBOM Generation on PyPI dataset (51 Python applications)
100Success RateSBOM4Python
Evaluation results
| Method | Links | |
|---|---|---|
| SBOM4PythonMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 100 | |
| PIP-SBOMMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 100 | |
| PIP-SBOMMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=setup.py ± setup.cfg2026.06 | 100 | |
| SBOM4PythonMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 100 | |
| PIP-SBOMMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 100 | |
| CycloneDX-PythonMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 100 | |
| SBOM4PythonMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 100 | |
| PIP-SBOMMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 100 | |
| MEM-SBOMMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 100 | |
| PIP-SBOMMetadata Configuration=setup.py ± setup.cfg2026.06 | 92.86 | |
| JakeMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 92.86 | |
| SBOM4PythonMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 71.43 | |
| PIP-SBOMMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 71.43 | |
| SyftMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 71.43 | |
| CDXGenMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 71.43 | |
| SBOM4PythonMetadata Configuration=setup.py ± setup.cfg2026.06 | 57.14 | |
| ORTMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 50 | |
| CDXGenMetadata Configuration=setup.py ± setup.cfg2026.06 | 42.86 | |
| ORTMetadata Configuration=setup.py ± setup.cfg2026.06 | 42.86 | |
| CDXGenMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 42.86 | |
| TrivyMetadata Configuration=requirements.txt ± (combined metadata)2026.06 | 42.86 | |
| SyftMetadata Configuration=setup.py ± setup.cfg2026.06 | 35.71 | |
| ORTMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 28.57 | |
| SyftMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 14.29 | |
| SyftMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| TrivyMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| CDXGenMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| CycloneDX-PythonMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| ORTMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| JakeMetadata Configuration=pyproject.toml (PEP 621 / setuptools)2026.06 | 0 | |
| SyftMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| TrivyMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| CDXGenMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| CycloneDX-PythonMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| SBOM4PythonMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| ORTMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| JakeMetadata Configuration=pyproject.toml (Poetry-managed)2026.06 | 0 | |
| TrivyMetadata Configuration=setup.py ± setup.cfg2026.06 | 0 | |
| CycloneDX-PythonMetadata Configuration=setup.py ± setup.cfg2026.06 | 0 | |
| JakeMetadata Configuration=setup.py ± setup.cfg2026.06 | 0 | |
| SyftMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| TrivyMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| CDXGenMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| CycloneDX-PythonMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| ORTMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| JakeMetadata Configuration=pyproject.toml + setup.cfg2026.06 | 0 | |
| TrivyMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 0 | |
| CycloneDX-PythonMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 0 | |
| JakeMetadata Configuration=pyproject.toml + setup.py ± setup.cfg2026.06 | 0 |