Repositories list

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •23•36•218•3•Updated Jan 8, 2025Jan 8, 2025

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •91•121•341•19•Updated Jan 8, 2025Jan 8, 2025

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Jan 8, 2025Jan 8, 2025

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •1•2•0•0•Updated Jan 7, 2025Jan 7, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •5•36•19•2•Updated Jan 7, 2025Jan 7, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •203•552•579•14•Updated Jan 7, 2025Jan 7, 2025

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •2•2•26•1•Updated Jan 7, 2025Jan 7, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •563•2.2k•1.1k•38•Updated Jan 7, 2025Jan 7, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •9•26•37•1•Updated Jan 6, 2025Jan 6, 2025

• scancode-workbench

  Public
  📊 ScanCode Workbench is a desktop app to review and conclude license and origin from code scans generated by ScanCode Toolkit.

  oss-compliancesoftware-licensingscancode-workbench+ 1scancode

  TypeScript

  •

  Apache License 2.0

  •74•160•35•1•Updated Jan 4, 2025Jan 4, 2025

• github-import-issues-csv

  Public
  A simple tool designed to import new issues from a CSV file into GitHub repositories and optionally, to add these issues to Projects.

  github-issuescsv-importgithub-projects

  Python

  •

  MIT License

  •2•0•0•0•Updated Jan 2, 2025Jan 2, 2025

• mass-scan

  Public
  Python

  •0•0•13•0•Updated Jan 2, 2025Jan 2, 2025

• what-to-click-browser-extension

  Public
  HTML

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Dec 31, 2024Dec 31, 2024

• rust-inspector

  Public
  An inspector for Rust language-based source, binaries, packages, dependencies and metadata

  Python

  •0•0•0•0•Updated Dec 30, 2024Dec 30, 2024

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •123•196•25•8•Updated Dec 17, 2024Dec 17, 2024

• intbitset

  Public
  Python C-based extension implementing fast integer bit sets

  Cython

  •

  GNU Lesser General Public License v3.0

  •18•0•1•0•Updated Dec 10, 2024Dec 10, 2024

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •11•3•13•0•Updated Dec 6, 2024Dec 6, 2024

• aboutcode-packages-npm-385

  Public
  Creative Commons Zero v1.0 Universal

  •1•0•0•0•Updated Dec 6, 2024Dec 6, 2024

• vulnerablecode-data

  Public
  1•1•0•1•Updated Dec 3, 2024Dec 3, 2024

• ai-gen-code-search

  Public
  A set of utilities and tools to detect and search AI-generated code

  Python

  •1•1•14•0•Updated Nov 28, 2024Nov 28, 2024

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Nov 25, 2024Nov 25, 2024

• go-inspector

  Public
  An inspector for Go language-based source, binaries, packages, dependencies and metadata

  Python

  •2•0•2•1•Updated Nov 5, 2024Nov 5, 2024

• scancode-plugins

  Public
  A set of plugins either delivered as builtin scancode-toolkit or extra plugins

  HTML

  •8•2•12•6•Updated Nov 1, 2024Nov 1, 2024

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •0•7•2•0•Updated Oct 30, 2024Oct 30, 2024

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •25•60•23•3•Updated Oct 25, 2024Oct 25, 2024

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Oct 21, 2024Oct 21, 2024

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Oct 15, 2024Oct 15, 2024

• source-inspector

  Public
  Tools to inspect source code and code symbols

  C

  •1•0•8•0•Updated Oct 15, 2024Oct 15, 2024

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •18•11•38•8•Updated Oct 15, 2024Oct 15, 2024

• android-inspector

  Public
  android-inspector is a library of utilities to introspect source and binary Android apps and Android device firmware. It can be used as a plugin to ScanCode.

  androidextractordecompiler+ 3android-applicationdexsbom

  Python

  •0•1•1•0•Updated Oct 15, 2024Oct 15, 2024