Repositories list

• source-inspector

  Public
  Tools to inspect source code and code symbols

  C

  •1•0•10•0•Updated Apr 14, 2025Apr 14, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •594•2.3k•1.2k•52•Updated Apr 13, 2025Apr 13, 2025

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Apr 12, 2025Apr 12, 2025

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •34•45•232•2•Updated Apr 11, 2025Apr 11, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •5•44•19•2•Updated Apr 10, 2025Apr 10, 2025

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •108•130•358•28•Updated Apr 9, 2025Apr 9, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •230•571•590•45•Updated Apr 8, 2025Apr 8, 2025

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  Python

  •24•22•62•13•Updated Apr 7, 2025Apr 7, 2025

• skeleton

  Public template
  Python

  •8•8•33•0•Updated Apr 4, 2025Apr 4, 2025

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •27•65•26•2•Updated Apr 3, 2025Apr 3, 2025

• rust-inspector

  Public
  An inspector for Rust language-based source, binaries, packages, dependencies and metadata

  Python

  •0•0•0•0•Updated Apr 2, 2025Apr 2, 2025

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •162•229•29•17•Updated Apr 1, 2025Apr 1, 2025

• .github

  Public
  aboutcode Homepage @ GitHub

  Apache License 2.0

  •0•0•0•0•Updated Mar 31, 2025Mar 31, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •13•31•51•1•Updated Mar 31, 2025Mar 31, 2025

• django-altcha

  Public
  Django field and widget for Altcha CAPTCHA.

  open-sourcedjangocaptcha+ 1altcha

  Python

  •

  MIT License

  •0•1•2•0•Updated Mar 31, 2025Mar 31, 2025

• aboutcode-toolkit

  Public
  ✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

  Python

  •45•96•7•9•Updated Mar 31, 2025Mar 31, 2025

• saneyaml

  Public
  Cleaner, simpler, safer and saner YAML parsing/serialization in Python, for YAML meant to be readable first, on top of PyYAML

  Python

  •4•9•6•0•Updated Mar 30, 2025Mar 30, 2025

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •1•9•4•1•Updated Mar 25, 2025Mar 25, 2025

• container-inspector

  Public
  container-inspector is a suite of analysis utilities and command line tools for Docker container images, their layers and how these relate to each other. It can also handle OCI images and Dockerfiles.

  dockerdocker-imagecontainer+ 3oci-imagecontainer-imagecontainer-analysis

  Python

  •9•37•19•4•Updated Mar 13, 2025Mar 13, 2025

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Mar 11, 2025Mar 11, 2025

• BIDS

  Public
  BIDS (Binary Identification of Dependencies with Search). The BIDS project will deliver tooling to analyse ELF binaries and extract key features and store these for indexing and searching using an inverted index. This project is sponsored by NLNET https://nlnet.nl/project/BIDS/.

  Python

  •

  Apache License 2.0

  •2•0•0•0•Updated Mar 9, 2025Mar 9, 2025

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Mar 6, 2025Mar 6, 2025

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •15•3•13•0•Updated Mar 6, 2025Mar 6, 2025

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •19•11•39•9•Updated Mar 6, 2025Mar 6, 2025

• metaflow

  Public
  Build and manage real-life data science projects with ease.

  Python

  •

  Apache License 2.0

  •825•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• scorecode

  Public
  A library to fetch and store various software package score, like OpenSSF Scorecard data.

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Feb 28, 2025Feb 28, 2025

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •2•6•0•0•Updated Feb 27, 2025Feb 27, 2025

• ort

  Public
  A suite of tools to assist with reviewing Open Source Software dependencies.

  Kotlin

  •

  Apache License 2.0

  •326•2•0•0•Updated Feb 25, 2025Feb 25, 2025

• binary-inspector

  Public
  A library and tools to inspect binaries (elf, winpe, mach0) for dependencies, symbols and other info, and models to store this.

  Python

  •0•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Feb 19, 2025Feb 19, 2025