# The vocabulary of dependency security, without the jargon.

Source: https://libwatch.com/en/glossary

Glossary

Eight short definitions, and what each one concretely changes for your projects.

-
## [SBOM](/en/glossary/sbom)

The machine-readable list of the components in a piece of software.

-
## [SCA](/en/glossary/sca)

The analysis of a project's dependencies.

-
## [EPSS](/en/glossary/epss)

The likelihood that a vulnerability will be exploited.

-
## [CISA KEV](/en/glossary/cisa-kev)

The catalog of vulnerabilities actually being exploited.

-
## [CERT-FR](/en/glossary/cert-fr)

ANSSI's advisories and alerts.

-
## [CycloneDX](/en/glossary/cyclonedx)

The security-oriented SBOM format.

-
## [SPDX](/en/glossary/spdx)

The license-oriented SBOM format.

-
## [End of life](/en/glossary/end-of-life)

When a language stops getting fixes.

## See these concepts at work on your own projects.

[Try it for 14 days](https://app.libwatch.com/users/sign_up?source=glossary_index)