xbom.wiki

COMPONENT REGISTRY

ID	Component	Type	Dependencies	Risk
XBOM-0042	openssl 3.1.4	Software	14	CRITICAL
Dependency Tree (14 dependencies) openssl 3.1.4 libcrypto 3.1.4 libz 1.3.1 libpthread 2.38 libssl 3.1.4 libcrypto 3.1.4 libc 2.38 libdl 2.38
XBOM-0198	react-dom 18.3.1	Software	8	LOW
Dependency Tree (8 dependencies) react-dom 18.3.1 react 18.3.1 scheduler 0.23.0 loose-envify 1.4.0 js-tokens 4.0.0
XBOM-0301	STM32F4 MCU Rev C	Hardware	22	MEDIUM
Dependency Tree (22 dependencies) STM32F4 MCU Rev C ARM Cortex-M4 Core r0p1 FPU Unit NVIC Controller Flash Memory 1MB SRAM 192KB Power Management IC LDO Regulator 3.3V LDO Regulator 1.8V
XBOM-0455	log4j 2.21.0	Software	6	LOW
Dependency Tree (6 dependencies) log4j 2.21.0 log4j-api 2.21.0 log4j-core 2.21.0 disruptor 3.4.4 jackson-databind 2.15.3
XBOM-0512	Murata Capacitor GRM155	Hardware	3	MEDIUM
Dependency Tree (3 dependencies) Murata Capacitor GRM155 Ceramic Dielectric X7R Ni Electrode Termination Sn Plating Layer
XBOM-0603	tensorflow 2.15.0	Software	31	MEDIUM
Dependency Tree (31 dependencies) tensorflow 2.15.0 numpy 1.26.2 protobuf 4.25.1 keras 2.15.0 h5py 3.10.0 absl-py 2.0.0
XBOM-0718	NXP LPC5500 Rev A.1	Hardware	18	CRITICAL
Dependency Tree (18 dependencies) NXP LPC5500 Rev A.1 ARM Cortex-M33 Core TrustZone Module Secure Boot ROM PRINCE Encryption PUF Key Store

High Impact Med Impact Low Impact

Critical

Medium

Low

Critical Medium Low

Component

From

openssl 3.0.12 → 3.1.4

- libcrypto 3.0.12

+ libcrypto 3.1.4

- libssl 3.0.12

+ libssl 3.1.4

libc 2.38 (unchanged)

+ libpthread 2.38 (new dependency)

- libgcc_s 1.0 (removed)

libdl 2.38 (unchanged)

+2 added -1 removed 2 changed

GET

/api/v1/components List all components with optional filtering

GET

/api/v1/components/{id}/dependencies Get dependency tree for a component

POST

/api/v1/components/{id}/compare Compare versions of a component BOM

GET

/api/v1/risk/matrix Retrieve risk assessment matrix data

GET

/api/v1/graph/{component} Get directed dependency graph data