Repositories list

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •88•119•314•14•Updated Nov 21, 2024Nov 21, 2024

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  0•0•0•0•Updated Nov 21, 2024Nov 21, 2024

• ai-gen-code-search

  Public
  A set of utilities and tools to detect and search AI-generated code

  Python

  •0•1•6•0•Updated Nov 20, 2024Nov 20, 2024

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •23•35•209•3•Updated Nov 20, 2024Nov 20, 2024

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  Python

  •1•1•0•0•Updated Nov 20, 2024Nov 20, 2024

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •552•2.1k•1.1k•30•Updated Nov 20, 2024Nov 20, 2024

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •201•543•575•14•Updated Nov 20, 2024Nov 20, 2024

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •8•25•46•2•Updated Nov 20, 2024Nov 20, 2024

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •4•34•17•0•Updated Nov 14, 2024Nov 14, 2024

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Nov 11, 2024Nov 11, 2024

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •108•181•16•6•Updated Nov 6, 2024Nov 6, 2024

• go-inspector

  Public
  An inspector for Go language-based source, binaries, packages, dependencies and metadata

  Python

  •2•0•2•1•Updated Nov 5, 2024Nov 5, 2024

• scancode-plugins

  Public
  A set of plugins either delivered as builtin scancode-toolkit or extra plugins

  HTML

  •8•2•12•6•Updated Nov 1, 2024Nov 1, 2024

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •0•7•2•0•Updated Oct 30, 2024Oct 30, 2024

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •24•58•23•2•Updated Oct 25, 2024Oct 25, 2024

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Oct 21, 2024Oct 21, 2024

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Oct 15, 2024Oct 15, 2024

• source-inspector

  Public
  Tools to inspect source code and code symbols

  C

  •1•0•8•0•Updated Oct 15, 2024Oct 15, 2024

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •18•9•38•8•Updated Oct 15, 2024Oct 15, 2024

• android-inspector

  Public
  android-inspector is a library of utilities to introspect source and binary Android apps and Android device firmware. It can be used as a plugin to ScanCode.

  androidextractordecompiler+ 3android-applicationdexsbom

  Python

  •0•1•1•0•Updated Oct 15, 2024Oct 15, 2024

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •1•1•15•0•Updated Oct 15, 2024Oct 15, 2024

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  Python

  •19•22•55•10•Updated Oct 15, 2024Oct 15, 2024

• univers

  Public
  Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

  package-managerversioningversion+ 7vulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •10•32•39•7•Updated Oct 15, 2024Oct 15, 2024

• vulnerablecode-data

  Public
  1•1•0•0•Updated Oct 15, 2024Oct 15, 2024

• purl-spec

  Public
  A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

  Other

  •161•0•0•0•Updated Oct 15, 2024Oct 15, 2024

• flot

  Public
  Make it easier to create Python packages. Build multiple Python packages from one repo easily.

  Python

  •

  Other

  •1•2•0•0•Updated Oct 15, 2024Oct 15, 2024

• nuget-inspector

  Public
  Inspect and resolve .NET and NuGet package dependencies like dotnet and nuget do. Fetch manifests data. Runs on Linux, Windows and macOS as a standalone application.

  package-managerdotnetnuget+ 2dependenciesdependency-resolver

  C#

  •4•4•22•2•Updated Sep 20, 2024Sep 20, 2024

• gemfileparser2

  Public
  A library to parse Rubygem gemspec and Gemfile files and Cocoapods podspec and Podfile files using Python. Friendly fork of https://gitlab.com/balasankarc/gemfileparser

  rubypythongemfile+ 7rubygemcocoapodspodfilegemspecpodspecgemfile-lockpodfile-lock

  Python

  •

  Other

  •6•2•1•0•Updated Sep 16, 2024Sep 16, 2024

• aboutcode-toolkit

  Public
  ✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

  Python

  •42•94•6•6•Updated Sep 16, 2024Sep 16, 2024

• ort

  Public
  A suite of tools to assist with reviewing Open Source Software dependencies.

  Kotlin

  •

  Apache License 2.0

  •312•2•0•0•Updated Sep 12, 2024Sep 12, 2024