It's used only as a dev dependency in 1 crate.

Depender (with downloads and own rev deps) cargo-sbom version
100 osv dev ^0.9.1