Repositories list

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Mar 12, 2025Mar 12, 2025

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Mar 11, 2025Mar 11, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •11•29•53•2•Updated Mar 11, 2025Mar 11, 2025

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •103•128•370•26•Updated Mar 11, 2025Mar 11, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •589•2.2k•1.2k•55•Updated Mar 10, 2025Mar 10, 2025

• BIDS

  Public
  BIDS (Binary Identification of Dependencies with Search). The BIDS project will deliver tooling to analyse ELF binaries and extract key features and store these for indexing and searching using an inverted index. This project is sponsored by NLNET https://nlnet.nl/project/BIDS/.

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Mar 9, 2025Mar 9, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •228•565•591•50•Updated Mar 6, 2025Mar 6, 2025

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •30•41•229•2•Updated Mar 6, 2025Mar 6, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •5•42•19•2•Updated Mar 6, 2025Mar 6, 2025

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Mar 6, 2025Mar 6, 2025

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •15•3•12•0•Updated Mar 6, 2025Mar 6, 2025

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •19•11•39•9•Updated Mar 6, 2025Mar 6, 2025

• aboutcode-toolkit

  Public
  ✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

  Python

  •45•95•7•9•Updated Mar 6, 2025Mar 6, 2025

• metaflow

  Public
  Build and manage real-life data science projects with ease.

  Python

  •

  Apache License 2.0

  •815•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• scorecode

  Public
  A library to fetch and store various software package score, like OpenSSF Scorecard data.

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Feb 28, 2025Feb 28, 2025

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •2•4•0•0•Updated Feb 27, 2025Feb 27, 2025

• ort

  Public
  A suite of tools to assist with reviewing Open Source Software dependencies.

  Kotlin

  •

  Apache License 2.0

  •323•2•0•0•Updated Feb 25, 2025Feb 25, 2025

• binary-inspector

  Public
  A library and tools to inspect binaries (elf, winpe, mach0) for dependencies, symbols and other info, and models to store this.

  Python

  •0•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •159•223•28•12•Updated Feb 24, 2025Feb 24, 2025

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •1•7•4•1•Updated Feb 22, 2025Feb 22, 2025

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •25•64•25•1•Updated Feb 21, 2025Feb 21, 2025

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Feb 19, 2025Feb 19, 2025

• skeleton

  Public template
  Python

  •7•8•34•0•Updated Feb 14, 2025Feb 14, 2025

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •1•3•27•1•Updated Feb 3, 2025Feb 3, 2025

• back2source-data

  Public
  Checking if package sources and binaries match

  Python

  •0•0•2•1•Updated Jan 27, 2025Jan 27, 2025

• workshop

  Public
  FOSS license and security compliance tools workshop before FOSDEM

  0•3•57•0•Updated Jan 22, 2025Jan 22, 2025

• scancode-workbench

  Public
  📊 ScanCode Workbench is a desktop app to review and conclude license and origin from code scans generated by ScanCode Toolkit.

  oss-compliancesoftware-licensingscancode-workbench+ 1scancode

  TypeScript

  •

  Apache License 2.0

  •74•165•35•0•Updated Jan 17, 2025Jan 17, 2025

• github-import-issues-csv

  Public
  A simple tool designed to import new issues from a CSV file into GitHub repositories and optionally, to add these issues to Projects.

  github-issuescsv-importgithub-projects

  Python

  •

  MIT License

  •2•1•0•0•Updated Jan 2, 2025Jan 2, 2025

• mass-scan

  Public
  Python

  •0•0•13•0•Updated Jan 2, 2025Jan 2, 2025

• what-to-click-browser-extension

  Public
  HTML

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Dec 31, 2024Dec 31, 2024