JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs
This repository contains the artifact for JBomAudit, a tool designed to evaluate the completeness and accuracy of Java SBOMs (Software Bill of Materials). The tool analyzes SBOMs alongside their corresponding JAR files to detect discrepancies, categorized as either missing dependencies (M1, M2, M3) or incorrect dependencies (N1, N2, N3). This artifact replicates the core results and analysis presented in the associated research paper: "JBomAudit: Assessing the Landscape, Compliance, and Security Implications of Java SBOMs".
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2025-02-28
- DOI
- https://doi.org/10.5281/zenodo.14193846
- Primary Topic
- Software Engineering Research
- Type
- article
- Field-Weighted Citation Impact
- 0.00