Lovable now lets users download a free SBOM for their projects

At a glance

In its Nov 1 update, Lovable added a way to download a project's SBOM (software bill of materials). It is available at no cost from the list of dependencies (outside code the app relies on) in the Security view.

Key points

1. 1

   You can choose between the SPDX 2.3 and CycloneDX 1.5 formats.

2. 2

   The file lists the dependencies used in production and their known vulnerabilities.

3. 3

   It can be handed to security or purchasing teams or loaded into your own security tools.

Why it matters

When asked for a security review, you can quickly pull out and share the outside code your app uses along with its known vulnerabilities.