Skip to content

SBOM Play

Settings

Configure analysis depth, caching, API tokens, and data export.

Back to Analysis

Account

Optional: GitHub token for higher rate limits
For security, tokens are never stored. You’ll need to provide one each session.

Analysis

Analysis Settings
Maximum depth to traverse when resolving dependency trees (default: 10)

10 levels

At this depth and below, use parallel processing for faster npm resolution (default: 4). Lower = more parallel, faster but more API load.

Parallel at depth 4+

Number of dependencies to resolve in parallel at deeper levels (default: 10)

10 concurrent

Author Location Enrichment

During analysis, author location data is fetched via GitHub GraphQL API (up to about 4,900 authors per run due to rate limits). Authors are prioritised by contribution count. If some were skipped, you can fetch the remaining ones here.

Clears the geocoding cache and re-resolves country codes for authors who already have a location string. Use this after geocoding provider changes or to retry previously failed lookups. Does not re-fetch GitHub profiles.

0%
API Settings
Timeout for all API requests in seconds (default: 10)

10 seconds

Sanctioned Countries
Compliance Feature: Configure countries sanctioned by your organization. Authors from these countries will be flagged in the Authors page. This helps identify potential compliance risks when authors from sanctioned countries contribute to your dependencies.
Enter ISO 3166-1 alpha-2 country codes separated by commas (e.g., CN, RU, BY). These are in addition to the built-in OFAC and EU sanctions lists.
Current Sanctions
Loading sanctions status...

Data

Storage Management
Export & Import (with Checksum Validation)
Checksum Protection: All exports include SHA-256 checksums to detect tampering. Imports automatically verify checksums before importing data.
Export Options
Import Options
For individual cache exports/imports and advanced storage tools, see Debug Tools.
Cache Management
Global Entity Caches: These caches store package, author, and vulnerability data shared across all analyses. Clearing analysis data does not affect these caches, allowing faster re-analysis without re-fetching from APIs.
Loading cache statistics...
Entity Caches (Global)
Analysis Data (Organization/Repository Specific)
This clears organization/repository analysis data but keeps entity caches intact.
Appearance
Choose your preferred color scheme

SBOM Play Sample Text

Stored Analyses

Loading stored analyses...

No analysis data yet

Analyze a GitHub org, user, repo, or upload an SBOM to get started.

Analyze a GitHub org