🔎 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

A suite of tools to automate software compliance checks.

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

Reliable project licenses detector.

Analyzes license information for multiple node.js modules (package.json files) as part of your software project.

Outputs licenses from 3rd party libraries to a file

You have licenses to manage, What Would Henry Rollins Do?

An Elixir mix task that lists all the licenses used by your Mix project dependencies.

project barista - open source license and vulnerability management

A light-weight app to audit and inventory large codebases for open source license compliance.

Cool links, tools & papers related to Open Source Licensing

Atarashi scans for license statements in open source software, focusing on text statistics. Designed to work stand-alone and with FOSSology.

Get a list of licenses used by a projects dependencies

Command line tool for running license checks to guard you from using packages with blacklisted licenses. Integrates well into your ci workflow.

detectes License name normalized like SPDX, by similarity classification (gensim)

Validated dataset generation using regex along with NLP Algorithms.

📝 Detect what license a project is distributed under

Spandx is a CLI to detect licenses for each dependency.