What is this component?

Paste a software component name as it appears in a bill of materials. This resolves it to a canonical identifier, or tells you honestly that it cannot. Everything runs in your browser: nothing is uploaded.

pkg:deb/debian/openssl

dictionary A known alias matched after standard normalisation.

Matched on openssl, seen 2 times in the corpus ยท permanent link

Try:

Or check a whole file

Drop a CycloneDX or SPDX file here, or .

Your file is checked in this browser. It is never uploaded.

Why this is hard

The same component is written openssl 1.1.1k, OpenSSL (FIPS), libssl1.1 and openssl-1.1.1k.tar.gz depending on who recorded it. A component that cannot be matched to an identifier is invisible to every vulnerability database, and since April 2026 most new records never receive the identifier the industry matched on.

Checks against published minimum elements. No regulator has reviewed this tool. StratifyPro does not retain anything you paste here: resolution happens in your browser.