AIsbom: The Supply Chain for Artificial Intelligence
AIsbom is a specialized security and compliance scanner for Machine Learning artifacts.
Unlike generic SBOM tools that only parse requirements.txt , AIsbom performs Deep Binary Introspection on model files ( .pt , .pkl , .safetensors ) to detect malware risks and legal license violations hidden inside the serialized weights.
⚡ Quick Start
1. Installation
Install directly from PyPI. No cloning required.
pip install aisbom-cli
Note: The package name is aisbom-cli, but the command you run is aisbom.
2. Run a Scan
Point it at any directory containing your ML project. It will find requirements files AND binary model artifacts.
... continue reading