Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Regex & cron
  3. SBOM viewer
Your files stay on your device

SBOM viewer

Open a CycloneDX or SPDX SBOM into a searchable component table with licences, purls, a dependency graph and filtered exports.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

CycloneDX or SPDX, JSON or XML

0 characters

Paste an SBOM or open a file, then press Open SBOM.

What this viewer does, and what it does not

It reads CycloneDX JSON and XML and SPDX 2.x JSON into a searchable table, scores each component on missing purl, licence, supplier, version, or hash, and draws the dependency relationships the document states. It is not a vulnerability scanner: no advisories, no version-range matching, no license compliance verdicts beyond showing the strings. SPDX 3.x JSON-LD, SPDX RDF/XML, and tag-value text files are recognized and refused with a pointer to the formats it does read. Dependencies are the relationships written in the document; the viewer never guesses transitive edges.

SBOM source

Three worked documents load into the editor below; nothing leaves this tab.

Up to 1,000,000 characters per run, 5,000 components, 20,000 dependency edges. Files over 400,000 characters still open, with a slow-file notice.

Runs on this device. Nothing is uploaded.

More regex & cron tools

  • JSON query
  • JSON diff
  • JSON validator
All regex & cron tools

Was this tool useful?