is there a way to semi-automatically get a comprehensive opam package version list for all transitive dependencies of a build? E.g. when building seppo.social for a security audit that would come in handy.

Dear @mro , not explicitly dune related, but there is orb , which is an alternative to use opam (it uses opam libraries under the hood), and produces a three-fold: environment variables (see https://builds.robur.coop/job/orb/build/1ef85cdc-e919-421c-a005-31ffc15bec45/f/build-environment ) installed …

Bill of Materials for a given (dune) build

Ecosystem

nojb July 27, 2026, 11:12am 3

Just for future reference in case someone comes across this old discussion: [ANN] ocaml-sbom 0.1.0.

Cheers,
Nicolas

Topic		Replies	Views
Generating a bills of material for a build Learning opam	9	918	July 27, 2026
Extending Dune With Package Management Ecosystem	23	2494	April 30, 2020
Explorations on Package Management in Dune Community announce	31	3422	July 20, 2023
How to compute dependency graph? Ecosystem	6	1057	July 28, 2022
[ANN] opam-ci: first release of a tool to check the health of your packages Ecosystem opam , announce	3	2080	June 23, 2018

Bill of Materials for a given (dune) build

Related topics