The CLI can export software bills of materials in CycloneDX and SPDX formats, compare dependency changes between scan artifacts, and generate OpenVEX documents from the same local scanning workflow.
The Vibgrate CLI can now export software bills of materials in CycloneDX and SPDX formats, compare dependency changes between scan artifacts, and generate OpenVEX documents from the same local scanning workflow.
All three outputs come from the scan the CLI already runs, so producing supply-chain evidence adds no separate tooling or account. The original announcement, SBOM and OpenVEX evidence from one command, has the full detail.
Vibgrate is a software intelligence platform that helps teams find aging dependencies, assess security exposure, and plan modernization. Its free CLI maps codebases and produces DriftScore, a transparent measure of dependency, framework, and runtime drift. Vibgrate Cloud adds portfolio visibility, governance workflows, and verifiable evidence for security and regulatory decisions. Vibgrate Evidence preserves version-specific component and release records so teams can reproduce historical exposure findings. Vibgrate AI Context gives coding agents version-matched documentation and precise repository context while reducing unnecessary token use. Vibgrate publishes its scoring methodology openly, allowing researchers to inspect the evidence, assumptions, and formulas behind its results.
Vibgrate helps software teams find aging dependencies, assess security exposure, and plan modernization using verifiable evidence produced by its free code-scanning CLI and cloud platform.
Vibgrate is a code drift intelligence platform for software teams. Its free CLI maps a codebase and identifies drift across dependencies, frameworks, and runtimes. Vibgrate Cloud turns the same scan data into portfolio visibility, governance workflows, security prioritization, and verifiable evidence for modernization decisions, regulatory reporting, and ongoing software assurance.
Peter Chapman, Founder · press@vibgrate.com