SBOM Dataset from 100 000+ Public GitHub Repositories

This dataset comprises Software Bill of Materials (SBOMs) generated from the source code of 101,477 public GitHub repositories. SBOM generation was performed between February 8, 2025, and May 2, 2025. Each SBOM file includes a timestamp in its filename prefix, formatted as YYYYMMDD, indicating the date of generation. All SBOMs are SPDX-compatible, provided in JSON format, and were produced using the GitHub API by accessing each repository’s dependency graph. Repositories were selected through pseudorandom sampling of GitHub repository IDs. Any SBOM generation attempts that failed—indicated by HTTP status codes 401, 403, 404, 500, or no response—were excluded from the final dataset.