#SBOM
Live, measured metrics for the hashtag #SBOM from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #sbom
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mastodon.online (Mastodon public tags API) · fetched 2026-09-26 02:15 UTC15 uses by 13 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mastodon.online (Mastodon public search API) · fetched 2026-09-26 02:15 UTCLive pulse
measured · mastodon.online (Mastodon tag timeline) · fetched 2026-09-26 02:15 UTCEverything below is measured over the latest 40 public posts (spanning ~535 hours).
Posting hours (UTC) — busiest: 15:00
Languages: English (32) · French (3) · Russian (3) · German (2)
Avg boosts / post: 0.3
Top of the latest posts
@lazyb0y Two minutes to flag a problem isn't an afternoon to fix it. CRA Kit's scope test answers one question: are you a manufacturer under the Cyber Resilience Act. The scan flags dependencies in CISA's KEV catalog, so you know if Article
CISA added WSO2 and Adobe Commerce flaws to its KEV catalog today, per Security Affairs (25 Sept 2026). Ship a product built on either flaw, and that's the evidence Article 3, point 42, calls "actively exploited." Article 14's clock starts:
Here's the shortened version. There's one file most repos still don't have: /.well-known/security.txt. RFC 9116 needs five lines: Contact, Expires, Encryption, Policy, Canonical. Article 14 already applies since 11 September. But before its
#sbom across platforms
every network with a public tag surfaceFollow #sbom straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/sbom