SBOM Library Details
You can select a library from the SBOM inventory to investigate its security status, dependency relationships, package information, and known vulnerabilities.
The library details page includes the Explore, General Info, and Vulnerabilities tabs.
Explore
The Explore tab provides an overview of the library's security and maintenance status and its relationships with other dependencies.
Policy status
The Policy Status section shows the current evaluation of the selected library.
Vulnerability Check
Checks for known vulnerabilities associated with the library.
Malware Check
Checks whether the library is associated with known malicious packages or malware.
License Check
Checks the license associated with the library.
Maintenance Check
Checks whether the library is actively maintained.
Update Check
Checks whether a newer version of the library is available.
Popularity Check
Checks the popularity of the library.
Usage Check
Checks whether the library is used by the application.
The panel on the right provides additional information about the library, such as its package manager, runtime status, source, license, release date, and latest available version.
Dependency graph
The Dependency Graph shows the selected library and its dependency relationships.
Use the graph to understand how the library is connected to other components in the dependency tree and whether dependencies are direct or indirect. Vulnerability indicators show where known vulnerabilities exist in the dependency path.
You can:
Use Show Direct Path to display the direct dependency path.
Use Show All to display additional dependency relationships.
Select a dependency file when multiple files are available.
Open the graph in full-screen mode.
General Info
The General Info tab provides metadata about the selected library, including:
Package URL (PURL)
Package name
Library name
Library version
SHA
Associated application
Stars
Forks
Open issues
License
Copyright
First seen
References associated with the library are also displayed when available.
Vulnerabilities
The Vulnerabilities tab shows known vulnerabilities associated with the selected library.
For each vulnerability, you can review the vulnerability ID, affected library, runtime information, security context, discovery date, CVSS score and severity, and OX severity.
Use the search and context filters to narrow the displayed vulnerabilities.
Last updated