---
title: "Software bills of materials (CycloneDX 1.6) for every published CrawlCheck artifact: the npm SDK, the PyPI SDK and the offline verifier, each built from the registry's bytes, file-hashed, with runtime dependencies, wrapped in a signed crawlcheck-sbom document"
method: GET
path: "/api/v1/sbom"
---

# Software bills of materials (CycloneDX 1.6) for every published CrawlCheck artifact: the npm SDK, the PyPI SDK and the offline verifier, each built from the registry's bytes, file-hashed, with runtime dependencies, wrapped in a signed crawlcheck-sbom document

`GET /api/v1/sbom`

## Request

- Base URL: `https://crawlcheck.io`
- URL: `https://crawlcheck.io/api/v1/sbom`
- Auth: none required

## Response `200`

crawlcheck-sbom-index

- object, nullable
  - `kind` string, nullable
  - `v` number, nullable
  - `latest` object[], nullable
    - `ecosystem` string, nullable
    - `name` string, nullable
    - `version` string, nullable
    - `artifact` string, nullable
    - `sha256` unknown
    - `runtime_dependencies` unknown[], nullable
      - unknown
    - `files` number, nullable
    - `sbom` string, nullable

---

[API](https://skmtc.dev/crawlcheck/apis/crawlcheck-api.md) · [All operations](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/llms.txt) · [OpenAPI document](https://skmtc.dev/crawlcheck/apis/crawlcheck-api/revisions/57acbd6d4489?raw)