Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.017 лип. 2026 р. · метрики 2.10.0
Усі теги
Тег каталогу
#sca
Усі репозиторії публічного реєстру з цим тегом — із тем GitHub або ключових слів, які публікують їхні реєстри пакетів. Здоров'я вимірюється за тією ж версіонованою методологією, що й решта реєстру.
21 запис
PyPI
SocketDev/socket-python-cli
Socket Python CLI to use in integrations
MIT21 лип. 2026 р. · метрики 2.10.0
npm · Maven · NuGet +1
cdxgen/cdxgen
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Apache-2.028 лип. 2026 р. · метрики 2.10.0
PyPI
CycloneDX/cyclonedx-python-lib
Functionality and DataModels of OWASP CycloneDX for Python
Apache-2.017 лип. 2026 р. · метрики 2.10.0
RubyGems
pay-rails/pay
Payments for Ruby on Rails apps
MIT30 лип. 2026 р. · метрики 2.10.0
PyPI
cycodehq/cycode-cli
Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning
MIT27 лип. 2026 р. · метрики 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Власна ліцензія21 лип. 2026 р. · метрики 2.10.0
Go · PyPI
bomly-dev/bomly-cli
Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.
Apache-2.017 лип. 2026 р. · метрики 2.10.0
Maven · npm
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Apache-2.015 лип. 2026 р. · метрики 2.10.0
npm
openwallet-foundation-labs/identity-common-ts
Опис репозиторію не опубліковано.
Apache-2.022 серп. 2026 р. · метрики 2.10.0
PyPI · npm
owasp-dep-scan/dep-scan
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
MIT24 серп. 2026 р. · метрики 2.10.0
Packagist
Sylius/StripePlugin
Sylius ^2.0 plugin to support Stripe Checkout and Stripe Web Elements
MIT5 вер. 2026 р. · метрики 2.10.0
NuGet
package-url/packageurl-dotnet
.NET parser for Package URLs (ECMA-427)
MIT18 лип. 2026 р. · метрики 2.10.0
Packagist
Sylius/PayumStripePlugin
Sylius Payum Stripe gateway plugin (with SCA support)
MIT5 вер. 2026 р. · метрики 2.10.0
Go
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Apache-2.019 лип. 2026 р. · метрики 2.10.0
Go · npm · PyPI
KKloudTarus/synapse-ce
Synapse - a governed control plane for software composition analysis, recon, evidence, and reporting. Verify Everything. Trust Nothing.
Apache-2.06 серп. 2026 р. · метрики 2.10.0
Go
Vulnetix/cli
Automate vulnerability triage which prioritizes remediation over discovery
Власна ліцензія5 вер. 2026 р. · метрики 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MIT20 лип. 2026 р. · метрики 2.10.0
—
tonycknight/pkgchk-cli
A dotnet tool for package dependency checks.
MIT1 серп. 2026 р. · метрики 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MIT19 лип. 2026 р. · метрики 2.10.0
npm
CycloneDX/cdxgen-action
GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products
MIT22 лип. 2026 р. · метрики 2.10.0