Generate CycloneDX SBOMs for Delphi projects — EU Cyber Resilience Act compliance in one click
The Chargy E-Mobility Transparency Software for Windows, Mac OS X and Linux (based on Electron)
The Chargy E-Mobility Transparency Application for iOS and Android
Open-source CRA compliance tool for European SMEs, featuring SBOM generation, vulnerability assessment, incident response, centralized documentation, and self-audit capabilities. EU-funded and completely free.
The ChargyCore TypeScript library shared between Chargy Desktop, Web & Mobile applications
Go vulnerability data aggregator with EU CRA compliance - 28 providers including EU-specific feeds (KEV, EUVD, BSI CERT-Bund, CERT-FR)
CLI tool for BSI TR-03183-2 SBOM generation, enrichment, validation, and submission. CycloneDX 1.6 / SPDX 2.3 compliant. AGPL-3.0 licensed.
The Chargy E-Mobility Transparency Software as WebApp
By December 2027, every product with digital elements sold in the EU needs conformity assessment. The 14 essential requirements, the open-source carve-outs and what shipping early gets you.
Go vulnerability data library — CVE feed parsing, CWE mapping, GRC control enrichment, and storage backends for EU CRA/NIS2 compliance tooling. AGPL-3.0 licensed.
Free GitHub Action that generates a CycloneDX SBOM, scans for CVEs, and emits CRA evidence (Annex I/VII mapped) on every build.
Open-source license & compliance scanner for modern codebases — CycloneDX/SPDX SBOMs + EU CRA evidence
C# .NET ChargyCore library
Cryptographically sign your SBOM with ECDSA-P521 + RFC 3161 timestamps. Tamper-evident, publicly verifiable. One GitHub Action step. EU CRA-ready.
Open-source CRA/NIS2 compliance reporting server — SBOM management, vulnerability scanning (VulnzMatcher), VEX lifecycle, CSAF advisory generation, audit trail, and ENISA submission. AGPL-3.0 licensed.
NeuralBridge — Industrial Autonomous Assurance Continuous evidence and assurance infrastructure for AI-enabled, connected, and safety-critical industrial machines. NeuralBridge helps machine builders, system integrators, and industrial operators maintain trustworthy evidence across the lifecycle of connected machines. It connects machine
Hash-chained, ECDSA-signed audit-log SDK for .NET. Tamper-evident, identity-bound, regulator-ready evidence.
To associate your repository with the eu-cra topic, visit your repo's landing page and select "manage topics."