Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.017 jul 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#sca
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
21 registros
PyPI
SocketDev/socket-python-cli
Socket Python CLI to use in integrations
MIT21 jul 2026 · métricas 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.028 jul 2026 · métricas 2.10.0
PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.017 jul 2026 · métricas 2.10.0
RubyGems
pay-rails/pay
Payments for Ruby on Rails apps
MIT30 jul 2026 · métricas 2.10.0
PyPI
cycodehq/cycode-cli
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
MIT27 jul 2026 · métricas 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Licencia propia21 jul 2026 · métricas 2.10.0
Go · PyPI
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Apache-2.017 jul 2026 · métricas 2.10.0
Maven · npm
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Apache-2.015 jul 2026 · métricas 2.10.0
npm
openwallet-foundation-labs/identity-common-ts
El repositorio no publica descripción.
Apache-2.022 ago 2026 · métricas 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MIT24 ago 2026 · métricas 2.10.0
Packagist
Sylius/StripePlugin
Sylius ^2.0 plugin to support Stripe Checkout and Stripe Web Elements
MIT5 sept 2026 · métricas 2.10.0
NuGet
package-url/packageurl-dotnet
.NET parser for Package URLs (ECMA-427)
MIT18 jul 2026 · métricas 2.10.0
Packagist
Sylius/PayumStripePlugin
Sylius Payum Stripe gateway plugin (with SCA support)
MIT5 sept 2026 · métricas 2.10.0
Go
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Apache-2.019 jul 2026 · métricas 2.10.0
Go · npm · PyPI
KKloudTarus/synapse-ce
Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.
Apache-2.06 ago 2026 · métricas 2.10.0
Go
Vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Licencia propia5 sept 2026 · métricas 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MIT20 jul 2026 · métricas 2.10.0
—
tonycknight/pkgchk-cli
A dotnet tool for package dependency checks.
MIT1 ago 2026 · métricas 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MIT19 jul 2026 · métricas 2.10.0
npm
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
MIT22 jul 2026 · métricas 2.10.0