check_sbom

shallow

io.github.endoflife-ai/endoflife-mcp · Verify this server

Audit a CycloneDX or SPDX JSON software bill of materials. Components are mapped to tracked products and scored for EOL risk; unmatched components are listed honestly rather than guessed. Pass the SBOM as a JSON string or object. Free tier scores up to 5 matched components per call; Pro up to 50.

100.0/100

1 trials · measured 39 days ago

check_sbom scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.endoflife-ai/endoflife-mcp, measured 11 Sept 2026 under methodology v0.2.0. Every measured component scored 100.

Component breakdown

ComponentWeightValue
Reliability35%not applicable
Schema integrity25%100.0
Failure behaviour15%not applicable
Latency15%not applicable
Concurrency10%not applicable

Tool details

Transport
remote
Credential class
open
Category
Finance & compliance
Input schema
not declared
Output schema
not declared
Side-effect classification
unclassified

Score history

DayScoreTierMethodology
2026-09-11100.0shallowv0.2.0

Probe evidence

ProbeOutcomes
schema_integritypass: 1

Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.

Embed this score

Available for every tool, scored or not — not a verification perk. Always links back to this page.

Vouch score: check_sbom
[![Vouch score](https://vouch.tools/api/tools/0a7d2635-416b-4a3a-8d47-590409c29363/badge.svg)](https://vouch.tools/tools/0a7d2635-416b-4a3a-8d47-590409c29363)
check_sbom — Vouch