> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Software Composition Analysis (SCA)

> Detect known vulnerabilities in open-source dependencies, transitive packages, and third-party libraries.

Modern software applications are composed of over 80% open-source components. Snapsec SCA identifies vulnerabilities in direct and transitive dependencies.

***

## Package Ecosystems

* `npm` / `yarn` / `pnpm` (`package-lock.json`)
* `pip` / `poetry` (`requirements.txt`, `Pipfile.lock`, `poetry.lock`)
* `Maven` / `Gradle` (`pom.xml`, `build.gradle`)
* `Go Modules` (`go.mod`, `go.sum`)
* `NuGet` (`packages.config`, `.csproj`)

### Software Bill of Materials (SBOM)

Generate and export industry-standard CycloneDX and SPDX SBOM files for regulatory audits.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.