eu-cra

Generate CycloneDX SBOMs for Delphi projects — EU Cyber Resilience Act compliance in one click

The Chargy E-Mobility Transparency Software for Windows, Mac OS X and Linux (based on Electron)

The Chargy E-Mobility Transparency Application for iOS and Android

Open-source CRA compliance tool for European SMEs, featuring SBOM generation, vulnerability assessment, incident response, centralized documentation, and self-audit capabilities. EU-funded and completely free.

The ChargyCore TypeScript library shared between Chargy Desktop, Web & Mobile applications

The Chargy E-Mobility Transparency Software as WebApp

Go vulnerability data aggregator with EU CRA compliance - 28 providers including EU-specific feeds (KEV, EUVD, BSI CERT-Bund, CERT-FR)

SBOM vulnerability scanner for embedded & IoT. Supports SPDX/CycloneDX, OSV.dev, EU CRA compliance. Written in Rust.

CLI tool for BSI TR-03183-2 SBOM generation, enrichment, validation, and submission. CycloneDX 1.6 / SPDX 2.3 compliant. AGPL-3.0 licensed.

By December 2027, every product with digital elements sold in the EU needs conformity assessment. The 14 essential requirements, the open-source carve-outs and what shipping early gets you.

Go vulnerability data library — CVE feed parsing, CWE mapping, GRC control enrichment, and storage backends for EU CRA/NIS2 compliance tooling. AGPL-3.0 licensed.

Free GitHub Action that generates a CycloneDX SBOM, scans for CVEs, and emits CRA evidence (Annex I/VII mapped) on every build.

Open-source license & compliance scanner for modern codebases — CycloneDX/SPDX SBOMs + EU CRA evidence

C# .NET ChargyCore library

24 hours starts the moment you know. The EU Cyber Resilience Act Article 14 reporting clock as a GitHub Action: SBOM, actively exploited vulnerability detection (CISA KEV), ENISA drafts.

The ultimate tree-sitter-backed patching engine for AI agents. Safely apply LLM-generated code changes across 16+ languages with AST-aware validation, fuzzy SEARCH/REPLACE, cryptographic SCITT provenance, and native MCP integration. 🤖🌳⚡

Cryptographically sign your SBOM with ECDSA-P521 + RFC 3161 timestamps. Tamper-evident, publicly verifiable. One GitHub Action step. EU CRA-ready.

GRC enrichment engine — maps CVEs to 74 compliance frameworks (EU CRA, NIS2, ISO 27001, GDPR, FedRAMP, etc.) via CWE/CPE matching. 67 frameworks, Go library + CLI. AGPL-3.0 licensed.

GitHub Action to generate dated security-fix records (SECURITY-RECORD.md + JSON) and SUPPORT.md support policy for EU CRA & PLD evidence

Open-source CRA/NIS2 compliance reporting server — SBOM management, vulnerability scanning (VulnzMatcher), VEX lifecycle, CSAF advisory generation, audit trail, and ENISA submission. AGPL-3.0 licensed.