Repositories list

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •8•26•38•1•Updated Dec 24, 2024Dec 24, 2024

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Dec 24, 2024Dec 24, 2024

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •203•549•568•15•Updated Dec 23, 2024Dec 23, 2024

• rust-inspector

  Public
  An inspector for Rust language-based source, binaries, packages, dependencies and metadata

  Python

  •0•0•0•1•Updated Dec 23, 2024Dec 23, 2024

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •23•36•212•2•Updated Dec 21, 2024Dec 21, 2024

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •2•2•22•1•Updated Dec 20, 2024Dec 20, 2024

• what-to-click-browser-extension

  Public
  HTML

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated Dec 20, 2024Dec 20, 2024

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •92•121•326•16•Updated Dec 18, 2024Dec 18, 2024

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •118•194•23•9•Updated Dec 17, 2024Dec 17, 2024

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •1•2•0•0•Updated Dec 11, 2024Dec 11, 2024

• scancode-workbench

  Public
  📊 ScanCode Workbench is a desktop app to review and conclude license and origin from code scans generated by ScanCode Toolkit.

  oss-compliancesoftware-licensingscancode-workbench+ 1scancode

  TypeScript

  •

  Apache License 2.0

  •72•158•34•0•Updated Dec 10, 2024Dec 10, 2024

• intbitset

  Public
  Python C-based extension implementing fast integer bit sets

  Cython

  •

  GNU Lesser General Public License v3.0

  •18•0•1•0•Updated Dec 10, 2024Dec 10, 2024

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •11•3•12•0•Updated Dec 6, 2024Dec 6, 2024

• aboutcode-packages-npm-385

  Public
  Creative Commons Zero v1.0 Universal

  •0•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •4•36•18•0•Updated Dec 5, 2024Dec 5, 2024

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •562•2.2k•1.1k•40•Updated Dec 5, 2024Dec 5, 2024

• vulnerablecode-data

  Public
  1•1•0•1•Updated Dec 3, 2024Dec 3, 2024

• ai-gen-code-search

  Public
  A set of utilities and tools to detect and search AI-generated code

  Python

  •1•1•14•0•Updated Nov 28, 2024Nov 28, 2024

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Nov 25, 2024Nov 25, 2024

• go-inspector

  Public
  An inspector for Go language-based source, binaries, packages, dependencies and metadata

  Python

  •2•0•2•1•Updated Nov 5, 2024Nov 5, 2024

• scancode-plugins

  Public
  A set of plugins either delivered as builtin scancode-toolkit or extra plugins

  HTML

  •8•2•12•6•Updated Nov 1, 2024Nov 1, 2024

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •0•7•2•0•Updated Oct 30, 2024Oct 30, 2024

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •25•60•23•3•Updated Oct 25, 2024Oct 25, 2024

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Oct 21, 2024Oct 21, 2024

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Oct 15, 2024Oct 15, 2024

• source-inspector

  Public
  Tools to inspect source code and code symbols

  C

  •1•0•8•0•Updated Oct 15, 2024Oct 15, 2024

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •18•11•38•8•Updated Oct 15, 2024Oct 15, 2024

• android-inspector

  Public
  android-inspector is a library of utilities to introspect source and binary Android apps and Android device firmware. It can be used as a plugin to ScanCode.

  androidextractordecompiler+ 3android-applicationdexsbom

  Python

  •0•1•1•0•Updated Oct 15, 2024Oct 15, 2024

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  Python

  •20•22•57•10•Updated Oct 15, 2024Oct 15, 2024

• univers

  Public
  Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

  package-managerversioningversion+ 7vulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •10•32•39•8•Updated Oct 15, 2024Oct 15, 2024