Skip to content
@aboutcode-org

AboutCode

Bring together best-in-class open source Software Composition Analysis (SCA) tools and data for open compliance and software supply chain security.

Pinned Loading

  1. scancode-toolkit scancode-toolkit Public

    🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer …

    Python 2.6k 799

  2. dejacode dejacode Public

    Automate open source license compliance and ensure software supply chain integrity

    Python 50 28

  3. scancode.io scancode.io Public

    ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and ot…

    Python 216 202

  4. vulnerablecode vulnerablecode Public

    A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatab…

    Python 704 329

  5. purldb purldb Public

    Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/pro…

    HTML 67 69

  6. scancode-action scancode-action Public

    Run ScanCode.io pipelines from your Workflows

    13 8

Repositories

Showing 10 of 150 repositories
  • aboutcode-mirror-nuget-catalog Public

    Append-only mirror of NuGet Catalog, updated hourly

    aboutcode-org/aboutcode-mirror-nuget-catalog's past year of commit activity
    Python 2 3 0 0 Updated Sep 20, 2026
  • www.aboutcode.org Public

    Docusaurus/markdown-based repository for the aboutcode.org website.

    aboutcode-org/www.aboutcode.org's past year of commit activity
    JavaScript 9 18 53 3 Updated Sep 20, 2026
  • scancode-required-phrases Public

    Mark required phrases in scancode rules automatically using machine learning models.

    aboutcode-org/scancode-required-phrases's past year of commit activity
    Python 0 0 0 4 Updated Sep 20, 2026
  • purlvalidator-go Public

    Offline Package URL validator using a prebuilt FST of known packages.

    aboutcode-org/purlvalidator-go's past year of commit activity
    Go 1 Apache-2.0 1 0 2 Updated Sep 20, 2026
  • purl-validator.rs Public

    Offline Package URL validator using a prebuilt FST of known packages.

    aboutcode-org/purl-validator.rs's past year of commit activity
    Rust 0 Apache-2.0 2 1 1 Updated Sep 20, 2026
  • aboutcode-mirror-euvd Public

    Mirror of European Union Vulnerability Database (EUVD)

    aboutcode-org/aboutcode-mirror-euvd's past year of commit activity
    Python 1 1 0 0 Updated Sep 20, 2026
  • aboutcode-mirror-alpine-secdb Public

    Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

    aboutcode-org/aboutcode-mirror-alpine-secdb's past year of commit activity
    0 0 0 0 Updated Sep 19, 2026
  • aboutcode-toolkit Public

    ✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

    aboutcode-org/aboutcode-toolkit's past year of commit activity
    Python 100 49 6 3 Updated Sep 19, 2026
  • aboutcode-mirror-kev Public

    AboutCode Mirror for CISA Known Exploited Vulnerabilities

    aboutcode-org/aboutcode-mirror-kev's past year of commit activity
    1 4 0 0 Updated Sep 19, 2026
  • scancode-toolkit Public

    🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

    aboutcode-org/scancode-toolkit's past year of commit activity
    Python 2,623 799 1,462 (4 issues need help) 224 Updated Sep 18, 2026