Software Composition Analysis Python Packages

commoncode

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

103K 3K 809

scancode-toolkit

80K 3K 806

ca9

CA9 is a local evidence engine for Python AppSec triage. It sits after scanners and before engineers waste time, proving which findings matter.

69K 9 1

scanoss

The SCANOSS python package providing a simple, easy to consume library for interacting with SCANOSS APIs/Engine.

25K 43 26

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

23K 49 12

ossindex-lib

Python library for querying OSS Index

9K 2 4

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

5K 217 206

scancode-toolkit-mini

4K 3K 806

scancodeio

2K 217 206

licensedcode-index

1K 3K 809

kospex

Know your code and know your developers: git analytics, code ownership, key person risk, dependency and supply chain freshness, and tech landscape — from a CLI and local web UI.

1K 9 4

tern

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

1K 1K 191