#spdx

A suite of tools to automate software compliance checks.

Functionality and DataModels of OWASP CycloneDX for Python

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

Create SBOMs in CycloneDX format for your Vite, Rollup or Rolldown projects with ease

This is a mirror of https://codeberg.org/fsfe/reuse-tool

🎁 wraps all package managers with a unifying CLI

A scalable server implementation of the OSS Review Toolkit.

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.