Repositories list

• aboutcode-mirror-nuget-catalog

  Public
  Append-only mirror of NuGet Catalog, updated hourly

  Python

  •0•1•0•0•Updated Nov 28, 2025Nov 28, 2025

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  licensespdxscancode+ 1cyclonedx

  Apache License 2.0

  •3•12•6•4•Updated Nov 27, 2025Nov 27, 2025

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •17•35•87•4•Updated Nov 27, 2025Nov 27, 2025

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis pipelines with ScanPipe pipelines. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  dockeropen-sourcevirtual-machine+ 10vulnerabilitieslicensespdxscascancodesoftware-composition-analysispurl+ 3

  Python

  •

  Apache License 2.0

  •131•154•430•21•Updated Nov 27, 2025Nov 27, 2025

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ Google Summer of Code, nexB and others generous sponsors!

  HTML

  •19•11•51•9•Updated Nov 27, 2025Nov 27, 2025

• purldb

  Public
  Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

  purlpackage-url

  HTML

  •38•53•286•7•Updated Nov 27, 2025Nov 27, 2025

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •249•640•676•68•Updated Nov 26, 2025Nov 26, 2025

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •9•54•21•2•Updated Nov 25, 2025Nov 25, 2025

• scancode-toolkit

  Public
  🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •625•2.4k•1.2k•64•Updated Nov 25, 2025Nov 25, 2025

• packageurl-dotnet

  Public
  .NET implementation of the package url spec

  C#

  •

  MIT License

  •14•0•0•0•Updated Nov 25, 2025Nov 25, 2025

• fingerprints

  Public
  Make it easier to compare and cross-reference the names of companies and people by applying strong normalisation.

  Python

  •

  MIT License

  •18•0•0•2•Updated Nov 24, 2025Nov 24, 2025

• intbitset

  Public
  Python C-based extension implementing fast integer bit sets

  Cython

  •

  GNU Lesser General Public License v3.0

  •17•0•1•0•Updated Nov 24, 2025Nov 24, 2025

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  4•0•0•0•Updated Nov 22, 2025Nov 22, 2025

• packageurl-swift

  Public
  Swift implementation of the package url spec

  Swift

  •

  MIT License

  •2•0•0•0•Updated Nov 21, 2025Nov 21, 2025

• packageurl-ruby

  Public
  Ruby implementation of the package url spec

  Ruby

  •

  MIT License

  •4•1•0•0•Updated Nov 21, 2025Nov 21, 2025

• packageurl-go

  Public
  Go implementation of the package url spec

  Go

  •

  MIT License

  •49•0•0•0•Updated Nov 19, 2025Nov 19, 2025

• purlvalidator-go

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2sbom-toolpackageurl

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 18, 2025Nov 18, 2025

• vulnerablecode-ai-experiments

  Public
  Experiments with AI to analyze vulnerabilities

  Python

  •2•1•2•0•Updated Nov 15, 2025Nov 15, 2025

• univers

  Public
  Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

  package-managerversioningversion+ 7vulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •18•38•48•12•Updated Nov 12, 2025Nov 12, 2025

• purl-validator.rs

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2sbom-toolpackageurl

  Rust

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 12, 2025Nov 12, 2025

• aboutcode.federated

  Public
  Federated data utilities

  Python

  •0•0•0•0•Updated Nov 8, 2025Nov 8, 2025

• packageurl-php

  Public
  PHP implementation of the package url spec

  PHP

  •

  MIT License

  •7•1•0•1•Updated Nov 8, 2025Nov 8, 2025

• federatedcode

  Public
  Decentralized and federated metadata for software applications

  Python

  •2•4•25•0•Updated Nov 7, 2025Nov 7, 2025

• purl-validator

  Public
  Let's create a PURL validator that's decentralized such that libraries can use it offline and help them create better PURLs.

  Python

  •0•0•4•0•Updated Nov 5, 2025Nov 5, 2025

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  Python

  •26•24•66•5•Updated Nov 5, 2025Nov 5, 2025

• extractcode

  Public
  A mostly universal file extraction library and CLI tool to extract almost any archive in a reasonably safe way on Linux, macOS and Windows.

  gzipzipextractor+ 13extracttarcabbzip2decompressionarchivezstd+ 6

  Python

  •22•38•42•13•Updated Oct 31, 2025Oct 31, 2025

• cyseq

  Public
  Python

  •1•1•1•0•Updated Oct 30, 2025Oct 30, 2025

• rust-inspector

  Public
  An inspector for Rust language-based source, binaries, packages, dependencies and metadata

  Python

  •0•1•2•0•Updated Oct 29, 2025Oct 29, 2025

• scancode-benchmark

  Public
  Python

  •0•0•0•0•Updated Oct 27, 2025Oct 27, 2025

• pkginfo2

  Public
  Git mirror of http://bazaar.launchpad.net/~tseaver/pkginfo ... with modifications

  Python

  •3•3•0•0•Updated Oct 27, 2025Oct 27, 2025