NuGet
microsoft/component-detection
Scans your project to determine what components you use
MIT11. Sept. 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#software-composition-analysis
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
7 Einträge
Go · npm
safedep/vet
Protect against malicious open source packages 🤖
Apache-2.019. Sept. 2026 · Metriken 2.10.0
npm
RetireJS/retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Apache-2.021. Sept. 2026 · Metriken 2.10.0
Maven
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Apache-2.028. Aug. 2026 · Metriken 2.10.0
Maven · npm
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Apache-2.08. Sept. 2026 · Metriken 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Eigene Lizenz12. Sept. 2026 · Metriken 2.10.0
Go
eitanity/kanonarion
Dependency assurance software for Go. A deterministic, local source of truth about your dependencies - what's in them, how they're licensed, how to call them, and which known vulnerabilities your code actually reaches. Developers query it from the CLI with human-readable output; AI coding agents get JSON.
Apache-2.011. Sept. 2026 · Metriken 2.10.0