Build software better, together

aboutcode-org / scancode-toolkit

🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Updated Nov 2, 2026
Python

package-url / purl-spec

Star

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

url package dependencies spdx package-management purl package-url sbom cyclonedx

Updated Nov 5, 2026
Python

aboutcode-org / vulnerablecode

Sponsor

Star

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

security vulnerability snyk vulnerability-databases vulndb cve cpe nvd vulnerability-detection osv vulnerability-identification vulnerability-scanners cvss security-tools ossindex purl package-url vulnerability-database

Updated Nov 4, 2026
Python

kdeldycke / meta-package-manager

Sponsor

Star

🎁 snapshot every package on your machine to one file, restore it on a new one

Updated Nov 4, 2026
Python

CycloneDX / cyclonedx-python

Star

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

python environment poetry conda owasp python3 pip bom spdx hacktoberfest requirements bill-of-materials software-bill-of-materials purl package-url sbom cyclonedx sbom-generator sbom-tool

Updated Nov 4, 2026
Python

aboutcode-org / scancode.io

Sponsor

Star

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

docker open-source virtual-machine code-analysis vulnerabilities binary-analysis license spdx sca scancode software-composition-analysis purl package-url license-compliance cyclonedx foss-compliance

Updated Nov 4, 2026
Python

CycloneDX / cyclonedx-python-lib

Star

Functionality and DataModels of OWASP CycloneDX for Python

python library owasp bom vex spdx hacktoberfest attestation bill-of-materials software-bill-of-materials purl package-url sbom software-library cyclonedx obom mbom saasbom cbom

Updated Nov 4, 2026
Python

package-url / packageurl-python

Star

Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and other generous sponsors.

python library hacktoberfest purl package-url

Updated Mar 11, 2026
Python

aboutcode-org / dejacode

Sponsor

Star

Automate open source license compliance and ensure software supply chain integrity

open-source vulnerabilities license spdx sca scancode purl package-url cyclonedx foss-compliance

Updated Nov 4, 2026
Python

aboutcode-org / univers

Sponsor

Star

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!