mkpsxiso vs ReARM

mkpsxiso builds PlayStation CD images from an XML document, with output in .bin/.cue or .iso formats for emulators or CD burning. File order in the XML sets LBA placement, which the project says can support access-time optimization. The builder handles mixed-mode CD-XA content, including XA audio and STR video, and CDDA tracks sourced from WAV, FLAC, PCM, or MP3 files. Its related tool, dumpsxiso, extracts PlayStation disc images and can generate compatible XML. It supports 2352-sector images and CUE files, and can extract tracks, license data, and raw sectors. Generated XML follows strict LBA order and preserves timestamps and XA attributes. The project targets homebrew development, ROM hacking, and reverse engineering. It runs on Linux, macOS, and Windows, and is GPL-2.0 licensed. Documentation covers command-line use, XML structure, track types, ordering, errors, and validation. Users supply their own Sony license data for injection. On ext4 and xfs, absent XML dates prevent 1:1 rebuilding for certain older files; Windows also has a documented directory-browsing issue with some nested structures.

ReARM is a release governance platform for organizing software composition, security findings, approvals, and evidence around what ships. It versions SBOMs and XBOMs by product, component, and release, with dependency comparisons across versions and search across a portfolio. Releases can retain HBOMs, VEX, VDR, BOV, SARIF, signatures, attestations, and build metadata for 10+ years. Reliza BEAR adds supplier, copyright, and license metadata to SBOMs. ReARM gathers vulnerabilities, weaknesses, policy violations, and license violations from Dependency-Track and other tools for triage and audit. Release policies can check releases automatically and support manual or automated approvals, recording approver identity, timestamp, and an evidence snapshot in an immutable audit trail. It connects with tools including GitHub Actions, GitLab, Azure DevOps, Jenkins, Slack, Microsoft Teams, Microsoft Sentinel, and Dependency-Track. ReARM Community Edition is self-hosted under AGPL 3.0 and can store and version BOMs without Dependency-Track; vulnerability scanning and policy findings require Dependency-Track or imported VDR files. External deployments require TLS. A free plan is available; paid plans start at $195/mo, and a 60-day trial is listed.