Metadata-Version: 2.4
Name: cbomscanner
Version: 0.2.0
Summary: CycloneDX 1.7 Cryptography Bill of Materials (CBOM) scanner for post-quantum compliance
Project-URL: Homepage, https://cbomscanner.com
Project-URL: Issues, https://github.com/Ganeshmancity/cbomscanner/issues
Author-email: Ganesh Netha <ganeshchilupuri99@gmail.com>
License: Apache-2.0
Keywords: cbom,compliance,cryptography,cyclonedx,nist,post-quantum,pqc,security
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.11
Requires-Dist: click>=8.1
Requires-Dist: pydantic>=2.7
Provides-Extra: ai
Requires-Dist: anthropic>=0.40; extra == 'ai'
Provides-Extra: dev
Requires-Dist: anthropic>=0.40; extra == 'dev'
Requires-Dist: pytest-cov>=5.0; extra == 'dev'
Requires-Dist: pytest>=8.0; extra == 'dev'
Requires-Dist: ruff>=0.4; extra == 'dev'
Requires-Dist: tree-sitter-javascript>=0.23; extra == 'dev'
Requires-Dist: tree-sitter-typescript>=0.23; extra == 'dev'
Requires-Dist: tree-sitter>=0.23; extra == 'dev'
Provides-Extra: full
Requires-Dist: anthropic>=0.40; extra == 'full'
Requires-Dist: tree-sitter-javascript>=0.23; extra == 'full'
Requires-Dist: tree-sitter-typescript>=0.23; extra == 'full'
Requires-Dist: tree-sitter>=0.23; extra == 'full'
Provides-Extra: js
Requires-Dist: tree-sitter-javascript>=0.23; extra == 'js'
Requires-Dist: tree-sitter-typescript>=0.23; extra == 'js'
Requires-Dist: tree-sitter>=0.23; extra == 'js'
Description-Content-Type: text/markdown

# cbomscanner

Generate a CycloneDX 1.7 Cryptography Bill of Materials (CBOM) for post-quantum compliance.

```bash
pip install cbomscanner
cbomscanner scan ./src
cbomscanner scan ./src --format summary
cbomscanner scan ./src --ai-roadmap --key $ANTHROPIC_API_KEY
```

Detects quantum-vulnerable cryptography (RSA, ECDSA, DH, DSA, MD5, SHA-1) across Python, JavaScript, TypeScript, Java, Go, and dependency manifests. Outputs valid CycloneDX 1.7 CBOM JSON — the compliance artifact required by EU CRA, DORA, and NIST guidance.
