https://github.com/tern-tools/tern
CycloneDX, SPDX
Additionally Tern can be configured to output SBOM data as human readable, JSON, HTML, YAML