SBOM Diff / Comparator

Compare two SBOMs to find added, removed, or changed components

Left SBOM

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "components": [
    { "type": "library", "name": "next", "version": "15.5.3", "purl": "pkg:npm/next@15.5.3" },
    { "type": "library", "name": "react", "version": "19.1.0", "purl": "pkg:npm/react@19.1.0" }
  ]
}

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "components": [
    { "type": "library", "name": "next", "version": "15.5.3", "purl": "pkg:npm/next@15.5.3" },
    { "type": "library", "name": "react", "version": "19.1.0", "purl": "pkg:npm/react@19.1.0" }
  ]
}

Right SBOM

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "components": [
    { "type": "library", "name": "next", "version": "15.5.4", "purl": "pkg:npm/next@15.5.4" },
    { "type": "library", "name": "react", "version": "19.1.0", "purl": "pkg:npm/react@19.1.0" },
    { "type": "library", "name": "ajv", "version": "8.17.1", "purl": "pkg:npm/ajv@8.17.1" }
  ]
}

{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "components": [
    { "type": "library", "name": "next", "version": "15.5.4", "purl": "pkg:npm/next@15.5.4" },
    { "type": "library", "name": "react", "version": "19.1.0", "purl": "pkg:npm/react@19.1.0" },
    { "type": "library", "name": "ajv", "version": "8.17.1", "purl": "pkg:npm/ajv@8.17.1" }
  ]
}

More SBOM Tools

SBOM Viewer / Explorer

Parse and explore CycloneDX or SPDX software bill of materials

SBOM Validator

Validate SBOM documents against CycloneDX or SPDX JSON schemas

SBOM Format Converter

Convert between CycloneDX and SPDX SBOM formats

SBOM Generator

Generate an SBOM from package.json, requirements.txt, and other manifests

CodeKudu is the best agentic platform for engineering leaders

Stand-ups, retrospectives, and 360° feedback for your team all for $50/month with code EARLYACCESS.

Learn more →