Deterministic • Local-first • Standards Compliant

SBOMs in a snap.
No cloud. No friction.

Generate deterministic SPDX 2.3 and CycloneDX 1.6 SBOMs from your lockfiles in milliseconds. Runs in CLI or browser. Identical output every time.

Try with npx View on GitHub 
$ npx snapsbom .
{
  "SPDXID": "SPDXRef-DOCUMENT",
  "spdxVersion": "SPDX-2.3",
  "name": "SnapSBOM SBOM",
  ...
  "packages": [...]
}

Deterministic by Design

Same input produces byte-for-byte identical output across OS, time, and runtime. Built for verification and compliance.

Truly Local-First

Zero network calls. Zero telemetry. Works offline, in CI, and in air-gapped environments.

CLI + Browser

Shared Rust core ensures CLI and WASM behave identically. No Docker. No heavy dependencies.

Standards Compliant

Outputs SPDX 2.3 and CycloneDX 1.6 JSON with reproducible, canonical formatting.