Open source repositories tagged with #spdx-sbom, ranked by health score.
GUAC aggregates software security metadata into a high fidelity graph database.