The openscap project is a set of open source libraries that support the SCAP (Security Content Automation Protocol) set of standards from NIST. It supports CPE, CCE, CVE, and CVSS.
Changes: This release adds OVAL variable support to almost all tests, an environmental variable test, semantic validation of variable models, XCCDF export and clone functions, and XCCDF policy wrappers for Python and Perl.