A Software Bill of Materials (software BOM) is a list of components in a piece of software. Software vendors often create products by assembling open source and commercial software components. The software BOM describes the components in a product. It is analogous to a list of ingredients on food packaging.
Source: Wikipedia
This tool (cargo bom
) can be used to construct Bill of Materials for software
using Cargo package manager.
The output of cargo bom
has two sections. First it prints out a table with all
top level dependencies, version numbers and names of licenses. Then it prints
all license texts found from depended projects (files matching globs "LICENSE"
and "UNLICENSE").
```console $ cargo bom >BOM.txt $ head BOM.txt Name | Version | Licenses ---- | ------- | -------- cargo | 0.35.0 | Apache-2.0, MIT failure | 0.1.5 | Apache-2.0, MIT structopt | 0.2.15 | Apache-2.0, MIT tabwriter | 1.1.0 | MIT, Unlicense
-----BEGIN cargo 0.35.0 LICENSES----- The Cargo source code itself does not bundle any third party libraries, but it depends on a number of libraries which carry their own copyright notices and ```
The Bill of Materials for this project can be found from BOM.txt.
cargo bom
is distributed under the terms of the MIT license.
See LICENSE for details.