Repositories list

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •102•128•365•24•Updated Mar 1, 2025Mar 1, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •584•2.2k•1.2k•59•Updated Feb 28, 2025Feb 28, 2025

• scorecode

  Public
  A library to fetch and store various software package score, like OpenSSF Scorecard data.

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Feb 28, 2025Feb 28, 2025

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •2•4•0•0•Updated Feb 27, 2025Feb 27, 2025

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •27•41•229•2•Updated Feb 27, 2025Feb 27, 2025

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Feb 27, 2025Feb 27, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •222•564•586•36•Updated Feb 26, 2025Feb 26, 2025

• ort

  Public
  A suite of tools to assist with reviewing Open Source Software dependencies.

  Kotlin

  •

  Apache License 2.0

  •320•2•0•0•Updated Feb 25, 2025Feb 25, 2025

• binary-inspector

  Public
  A library and tools to inspect binaries (elf, winpe, mach0) for dependencies, symbols and other info, and models to store this.

  Python

  •0•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •157•216•28•12•Updated Feb 24, 2025Feb 24, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •11•29•54•1•Updated Feb 22, 2025Feb 22, 2025

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •0•7•4•1•Updated Feb 22, 2025Feb 22, 2025

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •25•64•25•1•Updated Feb 21, 2025Feb 21, 2025

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Feb 19, 2025Feb 19, 2025

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •15•3•12•1•Updated Feb 14, 2025Feb 14, 2025

• skeleton

  Public template
  Python

  •7•8•34•0•Updated Feb 14, 2025Feb 14, 2025

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •1•3•27•1•Updated Feb 3, 2025Feb 3, 2025

• back2source-data

  Public
  Checking if package sources and binaries match

  Python

  •0•0•2•1•Updated Jan 27, 2025Jan 27, 2025

• workshop

  Public
  FOSS license and security compliance tools workshop before FOSDEM

  0•3•57•0•Updated Jan 22, 2025Jan 22, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •5•42•19•2•Updated Jan 21, 2025Jan 21, 2025

• scancode-workbench

  Public
  📊 ScanCode Workbench is a desktop app to review and conclude license and origin from code scans generated by ScanCode Toolkit.

  oss-compliancesoftware-licensingscancode-workbench+ 1scancode

  TypeScript

  •

  Apache License 2.0

  •74•164•35•0•Updated Jan 17, 2025Jan 17, 2025

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Jan 14, 2025Jan 14, 2025

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •19•11•39•9•Updated Jan 8, 2025Jan 8, 2025

• github-import-issues-csv

  Public
  A simple tool designed to import new issues from a CSV file into GitHub repositories and optionally, to add these issues to Projects.

  github-issuescsv-importgithub-projects

  Python

  •

  MIT License

  •2•1•0•0•Updated Jan 2, 2025Jan 2, 2025

• mass-scan

  Public
  Python

  •0•0•13•0•Updated Jan 2, 2025Jan 2, 2025

• what-to-click-browser-extension

  Public
  HTML

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Dec 31, 2024Dec 31, 2024

• rust-inspector

  Public
  An inspector for Rust language-based source, binaries, packages, dependencies and metadata

  Python

  •0•0•0•0•Updated Dec 30, 2024Dec 30, 2024

• intbitset

  Public
  Python C-based extension implementing fast integer bit sets

  Cython

  •

  GNU Lesser General Public License v3.0

  •18•0•1•0•Updated Dec 10, 2024Dec 10, 2024

• aboutcode-packages-npm-385

  Public
  Creative Commons Zero v1.0 Universal

  •2•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• vulnerablecode-data

  Public
  1•1•2•1•Updated Dec 3, 2024Dec 3, 2024