Skip to content
@aboutcode-org

AboutCode

Bring together best-in-class open source Software Composition Analysis (SCA) tools and data for open compliance and software supply chain security.

Pinned Loading

  1. scancode-toolkit scancode-toolkit Public

    🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer …

    Python 2.6k 799

  2. dejacode dejacode Public

    Automate open source license compliance and ensure software supply chain integrity

    Python 49 28

  3. scancode.io scancode.io Public

    ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and ot…

    Python 216 202

  4. vulnerablecode vulnerablecode Public

    A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatab…

    Python 705 329

  5. purldb purldb Public

    Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/pro…

    HTML 67 69

  6. scancode-action scancode-action Public

    Run ScanCode.io pipelines from your Workflows

    13 8

Repositories

Showing 10 of 150 repositories
  • aboutcode-mirror-nuget-catalog Public

    Append-only mirror of NuGet Catalog, updated hourly

    aboutcode-org/aboutcode-mirror-nuget-catalog's past year of commit activity
    Python 2 3 0 0 Updated Sep 24, 2026
  • aboutcode-mirror-alpine-secdb Public

    Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

    aboutcode-org/aboutcode-mirror-alpine-secdb's past year of commit activity
    0 0 0 0 Updated Sep 24, 2026
  • healthycode Public
    aboutcode-org/healthycode's past year of commit activity
    Jupyter Notebook 0 GPL-3.0 1 2 3 Updated Sep 24, 2026
  • www.aboutcode.org Public

    Docusaurus/markdown-based repository for the aboutcode.org website.

    aboutcode-org/www.aboutcode.org's past year of commit activity
    JavaScript 9 18 53 3 Updated Sep 24, 2026
  • dejacode Public

    Automate open source license compliance and ensure software supply chain integrity

    aboutcode-org/dejacode's past year of commit activity
    Python 49 AGPL-3.0 28 61 (4 issues need help) 4 Updated Sep 24, 2026
  • purlvalidator-go Public

    Offline Package URL validator using a prebuilt FST of known packages.

    aboutcode-org/purlvalidator-go's past year of commit activity
    Go 1 Apache-2.0 1 0 2 Updated Sep 24, 2026
  • purl-validator.rs Public

    Offline Package URL validator using a prebuilt FST of known packages.

    aboutcode-org/purl-validator.rs's past year of commit activity
    Rust 0 Apache-2.0 2 1 1 Updated Sep 24, 2026
  • aboutcode-mirror-euvd Public

    Mirror of European Union Vulnerability Database (EUVD)

    aboutcode-org/aboutcode-mirror-euvd's past year of commit activity
    Python 1 1 0 0 Updated Sep 24, 2026
  • aboutcode-mirror-kev Public

    AboutCode Mirror for CISA Known Exploited Vulnerabilities

    aboutcode-org/aboutcode-mirror-kev's past year of commit activity
    1 4 0 0 Updated Sep 24, 2026
  • purldb Public

    Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ , nexB and other fine supporters. Chat is at https://gitter.im/aboutcode-org/discuss

    aboutcode-org/purldb's past year of commit activity
    HTML 67 69 318 (1 issue needs help) 23 Updated Sep 24, 2026