Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
All tags
Catalogue tag
#sca
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
21 records
PyPI
SocketDev/socket-python-cli
Socket Python CLI to use in integrations
MITJul 21, 2026 · metrics 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.0Jul 28, 2026 · metrics 2.10.0
PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.0Jul 17, 2026 · metrics 2.10.0
RubyGems
pay-rails/pay
Payments for Ruby on Rails apps
MITJul 30, 2026 · metrics 2.10.0
PyPI
cycodehq/cycode-cli
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
MITJul 27, 2026 · metrics 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Custom licenseJul 21, 2026 · metrics 2.10.0
Go · PyPI
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Maven · npm
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Apache-2.0Jul 15, 2026 · metrics 2.10.0
npm
openwallet-foundation-labs/identity-common-ts
No repository description published.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MITAug 24, 2026 · metrics 2.10.0
Packagist
Sylius/StripePlugin
Sylius ^2.0 plugin to support Stripe Checkout and Stripe Web Elements
MITSep 5, 2026 · metrics 2.10.0
NuGet
package-url/packageurl-dotnet
.NET parser for Package URLs (ECMA-427)
MITJul 18, 2026 · metrics 2.10.0
Packagist
Sylius/PayumStripePlugin
Sylius Payum Stripe gateway plugin (with SCA support)
MITSep 5, 2026 · metrics 2.10.0
Go
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go · npm · PyPI
KKloudTarus/synapse-ce
Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
Go
Vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MITJul 20, 2026 · metrics 2.10.0
—
tonycknight/pkgchk-cli
A dotnet tool for package dependency checks.
MITAug 1, 2026 · metrics 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MITJul 19, 2026 · metrics 2.10.0
npm
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
MITJul 22, 2026 · metrics 2.10.0