WpBom
WordPress integration with OWASP CycloneDX and Dependency Track
Consider an alternative
WpBom shows warning signs in 2026 — compare the alternatives below before installing. It runs on 50+ sites and was last updated 2 years ago, and scores 28/100 on our health check.
- Small user base (50+ active installs)
- Very few reviews so far
- No update in over a year
- Only tested up to WordPress 6.7 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where WpBom stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| BOM | #22 |
| CycloneDX | #2 |
| Dependency Track | >100 |
Version adoption
Share of active sites per release.
About WpBom
From the official readme · v1.4.0Description
This package is compatible with WordPress Coding Standards, PSR-4.
WordPress integration with OWASP CycloneDX and Dependency Track
Features:
- Automatic BOM submission to OWASP Dependency Track
- Manual BOM submission to OWASP Dependency Track
- Download BOM JSON in OWASP CycloneDX format
Installation
This project uses PHP and Composer.
$ cd wp-content/plugins/
$ git clone https://gitlab.com/sepbit/wpbom.git
$ cd wpbom
$ composer update –no-dev
Changelog
1.4.0
- Add PHP 8.4
1.2.0
- Add WordPress as component
- Fix some bugs
1.1.0
- Add CPE example
- Fix Copyright
- Remove purl
1.0.2
- Add icon
1.0.0
- First release!
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best WpBom alternatives
All BOM plugins →| Rank | Plugin | Active installs |
|---|---|---|
| 2 |
DeepBOM: Bill of Materials
Bill of Materials and raw material inventory for WooCommerce. Multi-level BOMs, auto stock…
|
<10 |
FAQ
WpBom: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 11, 2026
Is WpBom free?
Yes. WpBom is free to download and use from the official WordPress.org plugin directory.
Is WpBom safe to use in 2026?
WpBom shows warning signs in 2026 — compare the alternatives below before installing. It runs on 50+ sites and was last updated 2 years ago, and scores 28/100 on our health check.
How many websites use WpBom?
WpBom is active on 50+ WordPress websites and has been downloaded 3,239 times since it launched in December 2021. It was downloaded 78 times in the last 30 days.
Does WpBom work with WordPress 7.1?
WpBom is officially tested up to WordPress 6.7.10, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does WpBom need?
WpBom requires PHP 8.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was WpBom last updated?
The latest version, 1.4.0, was released on January 9, 2025 (2 years ago).
Who makes WpBom?
WpBom is developed and maintained by Vitor Guia.
What are the best alternatives to WpBom?
The most popular alternatives to WpBom are DeepBOM: Bill of Materials (<10 installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
