npm-sbom

generates Software Bill of Materials

Generate SBOM

$ npm sbom

SPDX format

$ npm sbom --sbom-format spdx

CycloneDX format

$ npm sbom --sbom-format cyclonedx

Output to file

$ npm sbom > [sbom.json]

Include dev deps

$ npm sbom --omit dev

npm sbom [options]

npm sbom generates Software Bill of Materials. Lists all dependencies.
The command creates SBOM document. Supports SPDX and CycloneDX formats.

--sbom-format FORMAT

Output format (spdx, cyclonedx).

--omit TYPE

Omit dependency type.

--help

Display help information.

Added in npm 9. Supply chain security. Multiple formats supported.

npm sbom was added to support software supply chain security initiatives.