Repositories list

• saneyaml

  Public
  Cleaner, simpler, safer and saner YAML parsing/serialization in Python, for YAML meant to be readable first, on top of PyYAML

  Python

  •4•9•6•0•Updated Mar 30, 2025Mar 30, 2025

• skeleton

  Public template
  Python

  •8•8•34•1•Updated Mar 30, 2025Mar 30, 2025

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  2•0•0•0•Updated Mar 29, 2025Mar 29, 2025

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code

  Batchfile

  •160•226•29•12•Updated Mar 28, 2025Mar 28, 2025

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •32•44•231•4•Updated Mar 28, 2025Mar 28, 2025

• aboutcode-toolkit

  Public
  ✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

  Python

  •45•96•7•9•Updated Mar 28, 2025Mar 28, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •12•30•54•2•Updated Mar 28, 2025Mar 28, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •228•570•599•45•Updated Mar 28, 2025Mar 28, 2025

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •106•131•357•26•Updated Mar 27, 2025Mar 27, 2025

• django-altcha

  Public
  Django field and widget for Altcha CAPTCHA.

  Python

  •0•0•0•0•Updated Mar 27, 2025Mar 27, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •590•2.2k•1.2k•55•Updated Mar 25, 2025Mar 25, 2025

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  Apache License 2.0

  •1•9•4•1•Updated Mar 25, 2025Mar 25, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •5•43•19•2•Updated Mar 24, 2025Mar 24, 2025

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  Python

  •24•21•60•12•Updated Mar 24, 2025Mar 24, 2025

• container-inspector

  Public
  container-inspector is a suite of analysis utilities and command line tools for Docker container images, their layers and how these relate to each other. It can also handle OCI images and Dockerfiles.

  dockerdocker-imagecontainer+ 3oci-imagecontainer-imagecontainer-analysis

  Python

  •9•37•19•4•Updated Mar 13, 2025Mar 13, 2025

• elf-inspector

  Public
  A library to inspect ELF binary files

  Python

  •0•0•5•0•Updated Mar 11, 2025Mar 11, 2025

• BIDS

  Public
  BIDS (Binary Identification of Dependencies with Search). The BIDS project will deliver tooling to analyse ELF binaries and extract key features and store these for indexing and searching using an inverted index. This project is sponsored by NLNET https://nlnet.nl/project/BIDS/.

  Python

  •

  Apache License 2.0

  •2•0•0•0•Updated Mar 9, 2025Mar 9, 2025

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•0•1•0•Updated Mar 6, 2025Mar 6, 2025

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •15•3•12•0•Updated Mar 6, 2025Mar 6, 2025

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •19•11•39•9•Updated Mar 6, 2025Mar 6, 2025

• metaflow

  Public
  Build and manage real-life data science projects with ease.

  Python

  •

  Apache License 2.0

  •822•0•0•0•Updated Mar 4, 2025Mar 4, 2025

• scorecode

  Public
  A library to fetch and store various software package score, like OpenSSF Scorecard data.

  Python

  •

  Apache License 2.0

  •1•0•0•0•Updated Feb 28, 2025Feb 28, 2025

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •2•5•0•0•Updated Feb 27, 2025Feb 27, 2025

• ort

  Public
  A suite of tools to assist with reviewing Open Source Software dependencies.

  Kotlin

  •

  Apache License 2.0

  •324•2•0•0•Updated Feb 25, 2025Feb 25, 2025

• binary-inspector

  Public
  A library and tools to inspect binaries (elf, winpe, mach0) for dependencies, symbols and other info, and models to store this.

  Python

  •0•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

  pythonlicensingboolean-expression+ 3spdxspdx-licenselicense-expression

  Python

  •

  Other

  •26•64•26•2•Updated Feb 21, 2025Feb 21, 2025

• matchcode-tests

  Public
  Python

  •0•0•0•0•Updated Feb 19, 2025Feb 19, 2025

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •2•3•27•2•Updated Feb 3, 2025Feb 3, 2025

• back2source-data

  Public
  Checking if package sources and binaries match

  Python

  •0•0•2•1•Updated Jan 27, 2025Jan 27, 2025

• workshop

  Public
  FOSS license and security compliance tools workshop before FOSDEM

  0•3•57•0•Updated Jan 22, 2025Jan 22, 2025