Repositories list

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https:…

  securityvulnerabilitysnyk+ 15

  securityvulnerabilitysnykvulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •300•657•669•102•Updated Apr 1, 2026Apr 1, 2026

• scancode.io

  Public

  aboutcode-org/scancode.io’s past year of commit activity
  ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, t…

  dockeropen-sourcevirtual-machine+ 13

  dockeropen-sourcevirtual-machinecode-analysisvulnerabilitiesbinary-analysislicensespdxscascancode+ 6

  Python

  •

  Apache License 2.0

  •193•193•416•52•Updated Apr 1, 2026Apr 1, 2026

• aboutcode-mirror-euvd

  Public
  Mirror of European Union Vulnerability Database (EUVD)

  mirrorvulnerabilityeuvd

  mirrorvulnerabilityeuvd

  Python

  •1•0•0•0•Updated Apr 1, 2026Apr 1, 2026

• purldb

  Public
  Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sp…

  purlpackage-url

  purlpackage-url

  HTML

  •68•63•299•24•Updated Mar 31, 2026Mar 31, 2026

• aboutcode-toolkit

  Public
  :white_check_mark: AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your proj…

  Python

  •49•99•6•5•Updated Mar 30, 2026Mar 30, 2026

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7

  open-sourcevulnerabilitieslicensespdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •21•43•87•2•Updated Mar 30, 2026Mar 30, 2026

• scancode-plugins

  Public
  A set of plugins either delivered as builtin scancode-toolkit or extra plugins

  HTML

  •11•2•16•8•Updated Mar 30, 2026Mar 30, 2026

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  licensespdxscancode+ 1

  licensespdxscancodecyclonedx

  Apache License 2.0

  •7•12•5•4•Updated Mar 27, 2026Mar 27, 2026

• www.aboutcode.org

  Public
  Docusaurus/markdown-based repository for the aboutcode.org website.

  JavaScript

  •14•5•55•3•Updated Mar 27, 2026Mar 27, 2026

• aboutcode-mirror-nuget-catalog

  Public
  Append-only mirror of NuGet Catalog, updated hourly

  Python

  •3•2•0•0•Updated Mar 26, 2026Mar 26, 2026

• aboutcode-mirror-alpine-secdb

  Public
  Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

  0•0•0•0•Updated Mar 26, 2026Mar 26, 2026

• purlvalidator-go

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2

  fstpurlairgappedsbom-toolpackageurl

  Go

  •

  Apache License 2.0

  •0•0•1•0•Updated Mar 26, 2026Mar 26, 2026

• purl-validator.rs

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2

  fstpurlairgappedsbom-toolpackageurl

  Rust

  •

  Apache License 2.0

  •2•0•1•2•Updated Mar 26, 2026Mar 26, 2026

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  4•1•0•0•Updated Mar 26, 2026Mar 26, 2026

• packageurl-java

  Public
  Java/JVM implementation of the package url spec

  Java

  •

  MIT License

  •24•0•0•0•Updated Mar 25, 2026Mar 25, 2026

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•1•2•0•Updated Mar 24, 2026Mar 24, 2026

• typecode

  Public
  TypeCode provides comprehensive filetype and mimetype detection using multiple detectors including libmagic (included as a dependency for Linux, Windows and mac…

  Python

  •14•10•11•2•Updated Mar 23, 2026Mar 23, 2026

• scancode-toolkit

  Public
  :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your cod…

  licensingpackagesopen-source-licensing+ 17

  licensingpackagesopen-source-licensingdependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •721•2.5k•1.2k•176•Updated Mar 20, 2026Mar 20, 2026

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1

  fosslicensescancode-toolkitscancode-licensedb

  Makefile

  •11•62•21•5•Updated Mar 19, 2026Mar 19, 2026

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydat…

  HTML

  •23•12•54•10•Updated Mar 18, 2026Mar 18, 2026

• nuget-inspector

  Public
  Inspect and resolve .NET and NuGet package dependencies like dotnet and nuget do. Fetch manifests data. Runs on Linux, Windows and macOS as a standalone applica…

  package-managerdotnetnuget+ 2

  package-managerdotnetnugetdependenciesdependency-resolver

  C#

  •10•5•27•4•Updated Mar 17, 2026Mar 17, 2026

• license-expression

  Public
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id…

  pythonlicensingboolean-expression+ 3

  pythonlicensingboolean-expressionspdxspdx-licenselicense-expression

  Python

  •

  Other

  •28•73•29•6•Updated Mar 17, 2026Mar 17, 2026

• flot

  Public
  Make it easier to create Python packages. Build multiple Python packages from one repo easily.

  Python

  •

  Other

  •1•3•0•0•Updated Mar 16, 2026Mar 16, 2026

• purl-validator

  Public
  A PURL validator that's decentralized such that libraries can use it offline and help them create better PURLs.

  Python

  •0•0•7•0•Updated Mar 11, 2026Mar 11, 2026

• django-altcha

  Public
  Django field and widget for Altcha CAPTCHA.

  open-sourcedjangocaptcha+ 1

  open-sourcedjangocaptchaaltcha

  Python

  •

  MIT License

  •3•7•0•1•Updated Mar 11, 2026Mar 11, 2026

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  pythonpipdependency-resolver

  Python

  •27•24•68•6•Updated Mar 11, 2026Mar 11, 2026

• skeleton

  Public template
  Python

  •9•9•34•0•Updated Feb 27, 2026Feb 27, 2026

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code. Get…

  securitylicensesca+ 5

  securitylicensescascancodepurlsbomaboutcodedejacode

  Batchfile

  •

  Apache License 2.0

  •248•289•22•51•Updated Feb 26, 2026Feb 26, 2026

• univers

  Public
  Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is spons…

  package-managerversioningversion+ 7

  package-managerversioningversionvulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •21•45•51•14•Updated Feb 25, 2026Feb 25, 2026

• vulnerablecode-ai-experiments

  Public
  Experiments with AI to analyze vulnerabilities

  Python

  •4•2•2•1•Updated Feb 22, 2026Feb 22, 2026