52 seeded packages (direct + transitive) across a realistic Node.js + Python stack. SbomScanner matches each version against CVE feeds, classifies licenses across permissive/copyleft/proprietary, and flags EOL upstream versions. The shape behind a working NTIA SBOM compliance program.
| Package | Ecosystem | License | CVEs | EOL | Depth |
|---|