AboutCode

Bring together best-in-class open source Software Composition Analysis (SCA) tools and data for open compliance and software supply chain security.

Sponsor

Overview
Repositories
Discussions
Projects
Packages
People

README.md

Welcome to AboutCode! 👋

To get started, visit https://aboutcode.readthedocs.io/

Check out our contributing pages:

Sponsor us to support development and maintenance.

Pinned Loading

dejacode dejacode Public

Automate open source license compliance and ensure software supply chain integrity

Python 50 29
scancode-toolkit scancode-toolkit Public

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer …

Python 2.6k 805
healthycode healthycode Public

A new approch to compute FOSS project health score on request, by PURL, using GrimoireLab, ScanCode.io and PurlDB.

Jupyter Notebook 2
scancode.io scancode.io Public

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and ot…

Python 217 205
purldb purldb Public

Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/pro…

HTML 69 71
vulnerablecode vulnerablecode Public

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatab…

Python 708 336

Repositories

Type Language

Select language

All Batchfile C C# CSS Cython Go HTML Java JavaScript Jupyter Notebook Kotlin Makefile PHP Python Ruby Rust Shell Swift TypeScript

Sort

purl-validator.rs Public
Offline Package URL validator using a prebuilt FST of known packages.

aboutcode-org/purl-validator.rs's past year of commit activity

Rust 0 Apache-2.0 2 1 1 Updated Oct 7, 2026
aboutcode-mirror-alpine-secdb Public
Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

aboutcode-org/aboutcode-mirror-alpine-secdb's past year of commit activity

0 1 1 1 Updated Oct 7, 2026
aboutcode-mirror-nuget-catalog Public
Append-only mirror of NuGet Catalog, updated hourly

aboutcode-org/aboutcode-mirror-nuget-catalog's past year of commit activity

Python 2 3 0 0 Updated Oct 6, 2026
scancode-toolkit Public
🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

aboutcode-org/scancode-toolkit's past year of commit activity

Python 2,636 805 1,463 (4 issues need help) 237 Updated Oct 6, 2026
vulnerablecode Public
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

aboutcode-org/vulnerablecode's past year of commit activity

Python 708 Apache-2.0 336 720 (9 issues need help) 115 Updated Oct 6, 2026
dejacode Public
Automate open source license compliance and ensure software supply chain integrity

aboutcode-org/dejacode's past year of commit activity

Python 50 AGPL-3.0 29 54 (4 issues need help) 1 Updated Oct 6, 2026
www.aboutcode.org Public
Docusaurus/markdown-based repository for the aboutcode.org website.

aboutcode-org/www.aboutcode.org's past year of commit activity

JavaScript 9 18 53 3 Updated Oct 6, 2026
purlvalidator-go Public
Offline Package URL validator using a prebuilt FST of known packages.

aboutcode-org/purlvalidator-go's past year of commit activity

Go 1 Apache-2.0 1 0 2 Updated Oct 6, 2026
aboutcode-toolkit Public
✅ AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your project: it includes utilities to generate inventory/BOM or Attribution documentation.

aboutcode-org/aboutcode-toolkit's past year of commit activity

Python 100 48 6 3 Updated Oct 6, 2026
purldb Public
Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ , nexB and other fine supporters. Chat is at https://gitter.im/aboutcode-org/discuss

aboutcode-org/purldb's past year of commit activity

HTML 69 71 317 (1 issue needs help) 25 Updated Oct 6, 2026