Software Bill of Materials
EPPlus Software provides a Software Bill of Materials (SBOM) for each EPPlus release. The SBOM lists all third-party dependencies included in EPPlus, along with their versions, licenses and checksums.
Direct access
Each SBOM can be accessed directly via a URL. This is useful for automated tools and pipelines that consume SBOM data.
Specific version
https://epplussoftware.com/es/security/sbom/{version}.json
Latest published version
https://epplussoftware.com/es/security/sbom/latest.json
| Version | Release date | Download |
|---|---|---|
| 8.5.0 | 2026-03-06 | SBOM (CycloneDX JSON) |
| 8.4.2 | 2026-02-04 | SBOM (CycloneDX JSON) |
| 8.5.0.sha256 | - | SBOM (CycloneDX JSON) |
About the format
The SBOM is generated in CycloneDX JSON format, specification version 1.6. It includes all NuGet dependencies with versions, licenses and SHA-512 checksums.