ai-bom-generator 0.1.2__tar.gz

ai_bom_generator-0.1.2/LICENSE

@@ -0,0 +1,153 @@
+Apache License
+Version 2.0, January 2004
+https://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction, and
+distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by the copyright
+owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all other entities
+that control, are controlled by, or are under common control with that entity.
+For the purposes of this definition, "control" means (i) the power, direct or
+indirect, to cause the direction or management of such entity, whether by
+contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity exercising
+permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications, including
+but not limited to software source code, documentation source, and configuration
+files.
+
+"Object" form shall mean any form resulting from mechanical transformation or
+translation of a Source form, including but not limited to compiled object code,
+generated documentation, and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or Object form, made
+available under the License, as indicated by a copyright notice that is included
+in or attached to the work.
+
+"Derivative Works" shall mean any work, whether in Source or Object form, that
+is based on or derived from the Work and for which the editorial revisions,
+annotations, elaborations, or other modifications represent, as a whole, an
+original work of authorship. For the purposes of this License, Derivative Works
+shall not include works that remain separable from, or merely link (or bind by
+name) to the interfaces of, the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including the original version
+of the Work and any modifications or additions to that Work or Derivative Works
+thereof, that is intentionally submitted to Licensor for inclusion in the Work by
+the copyright owner or by an individual or Legal Entity authorized to submit on
+behalf of the copyright owner. For the purposes of this definition, "submitted"
+means any form of electronic, verbal, or written communication sent to the
+Licensor or its representatives, including but not limited to communication on
+electronic mailing lists, source code control systems, and issue tracking systems
+that are managed by, or on behalf of, the Licensor for the purpose of discussing
+and improving the Work, but excluding communication that is conspicuously marked
+or otherwise designated in writing by the copyright owner as "Not a
+Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of
+whom a Contribution has been received by Licensor and subsequently incorporated
+within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of this
+License, each Contributor hereby grants to You a perpetual, worldwide,
+non-exclusive, no-charge, royalty-free, irrevocable copyright license to
+reproduce, prepare Derivative Works of, publicly display, publicly perform,
+sublicense, and distribute the Work and such Derivative Works in Source or Object
+form.
+
+3. Grant of Patent License. Subject to the terms and conditions of this License,
+each Contributor hereby grants to You a perpetual, worldwide, non-exclusive,
+no-charge, royalty-free, irrevocable patent license to make, have made, use,
+offer to sell, sell, import, and otherwise transfer the Work, where such license
+applies only to those patent claims licensable by such Contributor that are
+necessarily infringed by their Contribution alone or by combination of their
+Contribution with the Work to which such Contribution was submitted. If You
+institute patent litigation against any entity alleging that the Work or a
+Contribution incorporated within the Work constitutes direct or contributory
+patent infringement, then any patent licenses granted to You under this License
+for that Work shall terminate as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the Work or
+Derivative Works thereof in any medium, with or without modifications, and in
+Source or Object form, provided that You meet the following conditions:
+
+(a) You must give any other recipients of the Work or Derivative Works a copy of
+this License; and
+
+(b) You must cause any modified files to carry prominent notices stating that You
+changed the files; and
+
+(c) You must retain, in the Source form of any Derivative Works that You
+distribute, all copyright, patent, trademark, and attribution notices from the
+Source form of the Work, excluding those notices that do not pertain to any part
+of the Derivative Works; and
+
+(d) If the Work includes a "NOTICE" text file as part of its distribution, then
+any Derivative Works that You distribute must include a readable copy of the
+attribution notices contained within such NOTICE file, excluding those notices
+that do not pertain to any part of the Derivative Works, in at least one of the
+following places: within a NOTICE text file distributed as part of the Derivative
+Works; within the Source form or documentation, if provided along with the
+Derivative Works; or within a display generated by the Derivative Works, if and
+wherever such third-party notices normally appear. The contents of the NOTICE
+file are for informational purposes only and do not modify the License. You may
+add Your own attribution notices within Derivative Works that You distribute,
+alongside or as an addendum to the NOTICE text from the Work, provided that such
+additional attribution notices cannot be construed as modifying the License.
+
+You may add Your own copyright statement to Your modifications and may provide
+additional or different license terms and conditions for use, reproduction, or
+distribution of Your modifications, or for any such Derivative Works as a whole,
+provided Your use, reproduction, and distribution of the Work otherwise complies
+with the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise, any
+Contribution intentionally submitted for inclusion in the Work by You to the
+Licensor shall be under the terms and conditions of this License, without any
+additional terms or conditions. Notwithstanding the above, nothing herein shall
+supersede or modify the terms of any separate license agreement you may have
+executed with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade names,
+trademarks, service marks, or product names of the Licensor, except as required
+for reasonable and customary use in describing the origin of the Work and
+reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or agreed to in
+writing, Licensor provides the Work on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied, including, without limitation,
+any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or
+FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the
+appropriateness of using or redistributing the Work and assume any risks
+associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory, whether in
+tort (including negligence), contract, or otherwise, unless required by
+applicable law (such as deliberate and grossly negligent acts) or agreed to in
+writing, shall any Contributor be liable to You for damages, including any
+direct, indirect, special, incidental, or consequential damages of any character
+arising as a result of this License or out of the use or inability to use the
+Work, even if such Contributor has been advised of the possibility of such
+damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing the Work or
+Derivative Works thereof, You may choose to offer, and charge a fee for,
+acceptance of support, warranty, indemnity, or other liability obligations and/or
+rights consistent with this License. However, in accepting such obligations, You
+may act only on Your own behalf and on Your sole responsibility, not on behalf of
+any other Contributor, and only if You agree to indemnify, defend, and hold each
+Contributor harmless for any liability incurred by, or claims asserted against,
+such Contributor by reason of your accepting any such warranty or additional
+liability.
+
+END OF TERMS AND CONDITIONS

ai_bom_generator-0.1.2/PKG-INFO

@@ -0,0 +1,204 @@
+Metadata-Version: 2.4
+Name: ai-bom-generator
+Version: 0.1.2
+Summary: Local AI/ML bill-of-materials generator
+Author: 0disoft
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/0disoft/ai-bom-generator
+Project-URL: Repository, https://github.com/0disoft/ai-bom-generator
+Project-URL: Issues, https://github.com/0disoft/ai-bom-generator/issues
+Project-URL: Changelog, https://github.com/0disoft/ai-bom-generator/blob/main/CHANGELOG.md
+Project-URL: Releases, https://github.com/0disoft/ai-bom-generator/releases
+Keywords: ai,ai-bom,bill-of-materials,bom,cyclonedx,machine-learning,ml-bom,supply-chain
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Build Tools
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: jsonschema<5,>=4.25
+Dynamic: license-file
+
+# AI-BOM Generator
+
+Status: Draft
+Scope: data
+Repository Type: cli-tool
+Addons: github-action
+
+AI-BOM Generator is a small CLI and optional GitHub Action for producing an AI
+bill of materials from a model project directory.
+
+The tool records declared model metadata, discovered `MODEL_CARD.md` paths,
+model or checkpoint digests, training-code references, dependency lockfiles,
+dataset references, prompt templates, and eval artifact references, then exports
+them to CycloneDX JSON 1.7.
+
+It is a generator and evidence reporter. It is not a model registry, scanner,
+legal compliance engine, dataset auditor, or AI governance platform.
+
+## Source Files
+
+- AGENTS.md: agent working rules
+- CHECKLIST.md: checklist router
+- VALIDATION.md: validation names and reporting requirements
+- .agents/context-map.md: agent route map
+- docs/product/02-spec.md: product source of truth
+- docs/cli/command-contract.md: CLI contract source
+- docs/github-action/action-contract.md: GitHub Action contract source
+- docs/data/pipeline-contract.md: artifact collection and export contract
+- docs/: design, operations, architecture, and engineering standards
+
+## Repository Shape Notes
+
+- cli-tool: This repository type owns command behavior, arguments, flags, config loading, exit codes, terminal output, JSON output, runtime compatibility, and shell integration contracts.
+- github-action: This repository type owns action inputs, outputs, permissions, token handling, and runner compatibility.
+
+## MVP Direction
+
+- accept one model directory as input;
+- discover in-root `MODEL_CARD.md` paths without copying model-card contents;
+- compute SHA-256 digests for model artifacts and checkpoints;
+- collect dependency and training-code references from known lockfile or config locations;
+- read dataset, prompt, and eval references from explicit config;
+- export one initial standards-backed BOM format;
+- report missing metadata as warnings without pretending the BOM is complete.
+
+## Quickstart
+
+The current public patch release is `v0.1.2`. It is distributed as a GitHub
+repository, GitHub Action, and Python package.
+
+Install the released package from PyPI:
+
+```powershell
+python -m pip install ai-bom-generator
+ai-bom --help
+```
+
+Try the bundled minimal project from a checkout:
+
+```powershell
+uv sync --locked
+$out = Join-Path ([System.IO.Path]::GetTempPath()) ("ai-bom-example-" + [System.Guid]::NewGuid().ToString("N"))
+New-Item -ItemType Directory -Path $out | Out-Null
+uv run --python 3.12 ai-bom generate examples/minimal-model-project --config examples/minimal-model-project/aibom.toml --format cyclonedx-json-1.7 --output (Join-Path $out "bom.cdx.json") --warning-report (Join-Path $out "warnings.json") --summary (Join-Path $out "summary.json")
+Get-ChildItem -LiteralPath $out
+```
+
+The same command shape works for your own model project as long as generated
+output paths resolve outside the target model directory.
+
+Example `aibom.toml` from `examples/minimal-model-project`:
+
+```toml
+schema_version = "1"
+
+[output]
+format = "cyclonedx-json-1.7"
+
+[model]
+name = "example-model"
+version = "0.1.0"
+model_card = "MODEL_CARD.md"
+license_declared = "NOASSERTION"
+
+[artifacts]
+include = ["models/*.safetensors"]
+
+[[dependencies]]
+path = "requirements.lock"
+type = "pip"
+
+[[datasets]]
+name = "example-dataset"
+license_declared = "NOASSERTION"
+```
+
+The CLI writes a BOM, a warning report, a JSON summary, and a generation
+manifest. The manifest is the commit marker for the output set and records path,
+size, and SHA-256 entries for the generated JSON files. Missing optional
+metadata is reported as machine-readable warnings. Unreadable required files,
+invalid config, unsupported exporters, unsafe paths, and invalid generated BOM
+output fail with non-zero exit codes. Generated output paths must resolve
+outside the target model project directory.
+
+## Current CLI Smoke
+
+```text
+ai-bom generate <model-directory> --config <path> --format cyclonedx-json-1.7 --output <bom.json> --warning-report <warnings.json> --summary <summary.json> [--manifest <manifest.json>]
+```
+
+## Current GitHub Action Smoke
+
+```yaml
+- uses: actions/checkout@v7
+
+- uses: actions/setup-python@v6
+  with:
+    python-version: "3.12"
+
+- uses: astral-sh/setup-uv@v8.3.1
+
+- id: ai-bom
+  uses: 0disoft/ai-bom-generator@v0.1.2
+  with:
+    model-directory: .
+    config: aibom.toml
+    warnings: allow
+
+- name: Verify AI-BOM outputs
+  shell: bash
+  run: |
+    set -euo pipefail
+    test -s "${{ steps.ai-bom.outputs.bom-path }}"
+    test -s "${{ steps.ai-bom.outputs.warning-report-path }}"
+    test -s "${{ steps.ai-bom.outputs.summary-path }}"
+    test "${{ steps.ai-bom.outputs.status }}" = "success"
+```
+
+The action invokes the packaged CLI with `uv run --project`, so consuming
+workflows must make Python 3.12 and `uv` available before this action runs. When
+`format` or `warnings` inputs are omitted, the action lets the CLI use the
+explicit config values and CLI defaults. Generated files are written to explicit
+paths when provided, or to a run-unique directory under `RUNNER_TEMP`.
+Summary-derived action outputs are published only when the generation manifest
+matches the BOM, warning report, and summary files from the current run.
+
+The current implementation validates explicit `aibom.toml` config files against
+AI-BOM config schema v1, validates generated CycloneDX JSON 1.7 output against
+the vendored official schema, and validates AI-BOM summary/warning contracts in
+tests.
+
+## Non-Goals
+
+- no automatic legal license judgment;
+- no training-data audit guarantee;
+- no vulnerability scanner;
+- no model serving runtime;
+- no hosted registry;
+- no broad "all ML frameworks" promise until fixtures prove it.
+
+## Repository Hygiene
+
+.editorconfig, .gitattributes, and .gitignore are generated to keep line endings,
+binary diffs, local files, build outputs, caches, and secret files under control.
+
+## Scope Notes
+
+Runtime floor is Python 3.12, the initial CLI adapter is `argparse`, package
+metadata lives in `pyproject.toml`, JSON Schema validation uses `jsonschema`,
+the project lockfile is `uv.lock`, explicit config files use `aibom.toml`, the
+first exporter is CycloneDX JSON 1.7, strict redaction is the default, and the
+repository license is Apache-2.0. The first public MVP release uses immutable
+GitHub tags, with `v0.1.2` as the current smoke-tested patch tag and first PyPI
+package release. Mutable major action tags, GitHub Marketplace registration,
+second exporter priority, automatic config discovery, and model artifact
+discovery defaults remain deferred until the repository owner records them in
+the source-of-truth documents.

ai_bom_generator-0.1.2/README.md

@@ -0,0 +1,177 @@
+# AI-BOM Generator
+
+Status: Draft
+Scope: data
+Repository Type: cli-tool
+Addons: github-action
+
+AI-BOM Generator is a small CLI and optional GitHub Action for producing an AI
+bill of materials from a model project directory.
+
+The tool records declared model metadata, discovered `MODEL_CARD.md` paths,
+model or checkpoint digests, training-code references, dependency lockfiles,
+dataset references, prompt templates, and eval artifact references, then exports
+them to CycloneDX JSON 1.7.
+
+It is a generator and evidence reporter. It is not a model registry, scanner,
+legal compliance engine, dataset auditor, or AI governance platform.
+
+## Source Files
+
+- AGENTS.md: agent working rules
+- CHECKLIST.md: checklist router
+- VALIDATION.md: validation names and reporting requirements
+- .agents/context-map.md: agent route map
+- docs/product/02-spec.md: product source of truth
+- docs/cli/command-contract.md: CLI contract source
+- docs/github-action/action-contract.md: GitHub Action contract source
+- docs/data/pipeline-contract.md: artifact collection and export contract
+- docs/: design, operations, architecture, and engineering standards
+
+## Repository Shape Notes
+
+- cli-tool: This repository type owns command behavior, arguments, flags, config loading, exit codes, terminal output, JSON output, runtime compatibility, and shell integration contracts.
+- github-action: This repository type owns action inputs, outputs, permissions, token handling, and runner compatibility.
+
+## MVP Direction
+
+- accept one model directory as input;
+- discover in-root `MODEL_CARD.md` paths without copying model-card contents;
+- compute SHA-256 digests for model artifacts and checkpoints;
+- collect dependency and training-code references from known lockfile or config locations;
+- read dataset, prompt, and eval references from explicit config;
+- export one initial standards-backed BOM format;
+- report missing metadata as warnings without pretending the BOM is complete.
+
+## Quickstart
+
+The current public patch release is `v0.1.2`. It is distributed as a GitHub
+repository, GitHub Action, and Python package.
+
+Install the released package from PyPI:
+
+```powershell
+python -m pip install ai-bom-generator
+ai-bom --help
+```
+
+Try the bundled minimal project from a checkout:
+
+```powershell
+uv sync --locked
+$out = Join-Path ([System.IO.Path]::GetTempPath()) ("ai-bom-example-" + [System.Guid]::NewGuid().ToString("N"))
+New-Item -ItemType Directory -Path $out | Out-Null
+uv run --python 3.12 ai-bom generate examples/minimal-model-project --config examples/minimal-model-project/aibom.toml --format cyclonedx-json-1.7 --output (Join-Path $out "bom.cdx.json") --warning-report (Join-Path $out "warnings.json") --summary (Join-Path $out "summary.json")
+Get-ChildItem -LiteralPath $out
+```
+
+The same command shape works for your own model project as long as generated
+output paths resolve outside the target model directory.
+
+Example `aibom.toml` from `examples/minimal-model-project`:
+
+```toml
+schema_version = "1"
+
+[output]
+format = "cyclonedx-json-1.7"
+
+[model]
+name = "example-model"
+version = "0.1.0"
+model_card = "MODEL_CARD.md"
+license_declared = "NOASSERTION"
+
+[artifacts]
+include = ["models/*.safetensors"]
+
+[[dependencies]]
+path = "requirements.lock"
+type = "pip"
+
+[[datasets]]
+name = "example-dataset"
+license_declared = "NOASSERTION"
+```
+
+The CLI writes a BOM, a warning report, a JSON summary, and a generation
+manifest. The manifest is the commit marker for the output set and records path,
+size, and SHA-256 entries for the generated JSON files. Missing optional
+metadata is reported as machine-readable warnings. Unreadable required files,
+invalid config, unsupported exporters, unsafe paths, and invalid generated BOM
+output fail with non-zero exit codes. Generated output paths must resolve
+outside the target model project directory.
+
+## Current CLI Smoke
+
+```text
+ai-bom generate <model-directory> --config <path> --format cyclonedx-json-1.7 --output <bom.json> --warning-report <warnings.json> --summary <summary.json> [--manifest <manifest.json>]
+```
+
+## Current GitHub Action Smoke
+
+```yaml
+- uses: actions/checkout@v7
+
+- uses: actions/setup-python@v6
+  with:
+    python-version: "3.12"
+
+- uses: astral-sh/setup-uv@v8.3.1
+
+- id: ai-bom
+  uses: 0disoft/ai-bom-generator@v0.1.2
+  with:
+    model-directory: .
+    config: aibom.toml
+    warnings: allow
+
+- name: Verify AI-BOM outputs
+  shell: bash
+  run: |
+    set -euo pipefail
+    test -s "${{ steps.ai-bom.outputs.bom-path }}"
+    test -s "${{ steps.ai-bom.outputs.warning-report-path }}"
+    test -s "${{ steps.ai-bom.outputs.summary-path }}"
+    test "${{ steps.ai-bom.outputs.status }}" = "success"
+```
+
+The action invokes the packaged CLI with `uv run --project`, so consuming
+workflows must make Python 3.12 and `uv` available before this action runs. When
+`format` or `warnings` inputs are omitted, the action lets the CLI use the
+explicit config values and CLI defaults. Generated files are written to explicit
+paths when provided, or to a run-unique directory under `RUNNER_TEMP`.
+Summary-derived action outputs are published only when the generation manifest
+matches the BOM, warning report, and summary files from the current run.
+
+The current implementation validates explicit `aibom.toml` config files against
+AI-BOM config schema v1, validates generated CycloneDX JSON 1.7 output against
+the vendored official schema, and validates AI-BOM summary/warning contracts in
+tests.
+
+## Non-Goals
+
+- no automatic legal license judgment;
+- no training-data audit guarantee;
+- no vulnerability scanner;
+- no model serving runtime;
+- no hosted registry;
+- no broad "all ML frameworks" promise until fixtures prove it.
+
+## Repository Hygiene
+
+.editorconfig, .gitattributes, and .gitignore are generated to keep line endings,
+binary diffs, local files, build outputs, caches, and secret files under control.
+
+## Scope Notes
+
+Runtime floor is Python 3.12, the initial CLI adapter is `argparse`, package
+metadata lives in `pyproject.toml`, JSON Schema validation uses `jsonschema`,
+the project lockfile is `uv.lock`, explicit config files use `aibom.toml`, the
+first exporter is CycloneDX JSON 1.7, strict redaction is the default, and the
+repository license is Apache-2.0. The first public MVP release uses immutable
+GitHub tags, with `v0.1.2` as the current smoke-tested patch tag and first PyPI
+package release. Mutable major action tags, GitHub Marketplace registration,
+second exporter priority, automatic config discovery, and model artifact
+discovery defaults remain deferred until the repository owner records them in
+the source-of-truth documents.

ai_bom_generator-0.1.2/pyproject.toml

@@ -0,0 +1,67 @@
+[build-system]
+requires = ["setuptools>=77"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "ai-bom-generator"
+version = "0.1.2"
+description = "Local AI/ML bill-of-materials generator"
+readme = "README.md"
+requires-python = ">=3.12"
+license = "Apache-2.0"
+authors = [
+  { name = "0disoft" }
+]
+keywords = [
+  "ai",
+  "ai-bom",
+  "bill-of-materials",
+  "bom",
+  "cyclonedx",
+  "machine-learning",
+  "ml-bom",
+  "supply-chain"
+]
+classifiers = [
+  "Development Status :: 3 - Alpha",
+  "Environment :: Console",
+  "Intended Audience :: Developers",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.12",
+  "Topic :: Scientific/Engineering :: Artificial Intelligence",
+  "Topic :: Security",
+  "Topic :: Software Development :: Build Tools"
+]
+dependencies = [
+  "jsonschema>=4.25,<5"
+]
+
+[project.urls]
+Homepage = "https://github.com/0disoft/ai-bom-generator"
+Repository = "https://github.com/0disoft/ai-bom-generator"
+Issues = "https://github.com/0disoft/ai-bom-generator/issues"
+Changelog = "https://github.com/0disoft/ai-bom-generator/blob/main/CHANGELOG.md"
+Releases = "https://github.com/0disoft/ai-bom-generator/releases"
+
+[project.scripts]
+ai-bom = "ai_bom_generator.cli:main"
+
+[tool.setuptools.packages.find]
+where = ["src"]
+
+[tool.setuptools.package-data]
+ai_bom_generator = [
+  "config/schema/*.json",
+  "exporters/cyclonedx_json/schema/*.json",
+  "exporters/cyclonedx_json/schema/LICENSE"
+]
+
+[tool.ruff]
+target-version = "py312"
+src = ["src", "tests", "scripts"]
+
+[dependency-groups]
+dev = [
+  "ruff>=0.15.20",
+]

ai_bom_generator-0.1.2/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

ai_bom_generator-0.1.2/src/ai_bom_generator/__init__.py

@@ -0,0 +1,3 @@
+"""AI-BOM Generator package."""
+
+__version__ = "0.1.2"

ai_bom_generator-0.1.2/src/ai_bom_generator/__main__.py

@@ -0,0 +1,5 @@
+from ai_bom_generator.cli import main
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())