Developer reports
SBOM reference checker
Find duplicate and unresolved IDs in CycloneDX or SPDX JSON.
Your inputs
Start with an exampleYour result
Example resultAa — A small example of your colors.
How it works
Collect component/service IDs and compare dependency endpoints, or collect SPDX element IDs and relationship endpoints.
The sample BOM has two IDs and one dependency between them, with no missing references.
Limits
Reference inventory only, not full schema or compliance validation. CycloneDX dependsOn and SPDX 2.3 relationships are covered; known external SPDX document IDs are listed without fetching them.