Instructions file GitHub Copilot
Instructions for bomly-dev/bomly-cli, a project described as: Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Instructions file CodexOpenCode
Instructions for bomly-dev/bomly-cli, covering agent instructions — bomly cli, build & test, git worktrees, architecture and plugin framework.
Instructions file
Instructions for bomly-dev/bomly-cli, covering claude.md, build & test, git worktrees, architecture and plugin framework.
Command
Compare dependency state between two points — two Git refs, two SBOM files, or two container image tags — and report what changed. diff runs the scan pipeline against both states, so the same target flags and gates apply to each side.
Command
Answer "why is this package here?" — trace every dependency path that pulls a package into the graph. explain runs the same detect and match stages as scan, then walks the graph from the project roots to the package you named.
Command
Resolve a target's dependencies into one consolidated graph, then optionally enrich, analyze, audit, and render it. scan is the pipeline every other graph command builds on — flags you learn here work the same way on explain and diff.
MCP server Claude CodeCodexCursor +2
Give your coding agent the dependency graph it is about to change: scan, diff, explain, audit. Runs locally from the bomly-mcp npm package.