A community wiki for all things AI/ML bill of materials (MLBOM, AIBOM) and transparency into AI/ML models.

Generate xBOMs enriched with AI, SaaS, Crypto and more using Static Code Analysis

Scan codebases for AI SDK usage and map compliance risks to NIST AI RMF, ISO 42001, and EU AI Act

EU AI Act compliance scanner — 39 checks, 7 framework trust layers. pip install air-blackbox

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

Open security scanner for AI supply chain: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

An AI-BOM visual viewer

THIS IS H A K C I N G Q U A L I T Y

Example Template created from https://github.com/haKC-ai/hakcai_secure_repo_template_creator

An AI-BOM goof project for Snyk AI-BOM cli

AIBOM policy-as-code engine — deny risky combinations of models, tools, and data. OPA-style policy rules for AI supply chain governance. Enforce model pinning, tool approvals, and provider restrictions.

Runtime AIBOM emitter — generate AI Bills of Materials from what actually ran. Combines static inventory with runtime OTel trace evidence: models, tools, endpoints, versions. CycloneDX-compatible output.

Automated transparency, woven from the ground up. SBOM generation for Python & AI projects. Extract metadata from GGUF, ONNX, PyTorch, and Safetensors models with native Hatchling build-hook support.