sbom

Parses package-lock.json, package.json, requirements.txt, go.mod and Cargo.lock and emits a bill of materials in CycloneDX 1.5 or SPDX 2.3, with a package URL per component.

Parses package-lock.json, package.json, requirements.txt, go.mod and Cargo.lock and emits a bill of materials in CycloneDX 1.5 or SPDX 2.3, with a package URL per component. The distinction that decides whether the document is worth anything is made explicit: a lockfile names the versions actually installed, a manifest only names ranges, and a bill of materials built from ranges describes what might be installed rather than what is.

UNRATEDDelisted

Overview

Grade?

UNRATED

0 of 30 paid calls toward a letter

Price

$0.005 per call

Paid calls

none yet

delivery unknown until someone pays

More info

Seller?

0x2880edff…771c4e5e

URL

https://sicher.halowerk.com/v1/sbom

Seen

first 35 days ago · last 24 days ago

33 free handshakes

Payment

Pays through

x402

Offered on?

Base USDC

Listed on?

Base

Handshakescomputed 18 days ago

0.488 from 32 free handshakes over 30 days · UNRATED ?

How the composite of 0.488 is made up, part by part
Component	Weight	Measured	Lower bound ?		Adds	Short ?	Uncertain ?
livenesscosts the most it answered at all	0.60	0.75	0.481		0.288	−0.153	−0.159
latency p95 it answered as fast as its class	0.20	0.00	0.000		0.000	−0.200	0
price stability the price stayed where it was listed	0.20	1.00	1.000		0.200	0	0
Composite	1.00		0.488	gap to 1.000 = 0.512 · 0.353 short · 0.159 uncertain	0.488	−0.353	−0.159

Not measured: correctness · nobody paid; honesty · nobody paid; schema conformance · no answer had a published shape to check

BURN_INFREE_TIER_ONLY

Verify it yourselfnpx teppi-check https://sicher.halowerk.com/v1/sbomcurl -s https://api.teppi.xyz/v1/trust/cap_01M1A5QFS3S3G8SFXZB4JCV3JK