maxhbr

LicenseScannerComparison

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

my-zephyr-workspace

rail

stupid-fossology-curl-client

tern

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBoM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

UERANSIM

Open source 5G UE and RAN (gNodeB) implementation.

ACS-vsc

Automation Case Study: “virtual supply chain”

augur

Python library and web service for Open Source Software Health and Sustainability metrics & data collection.

clearlydefined

Doc, wiki and organizational content for ClearlyDefined

cuddly-parakeet

https://ort-talk.slack.com/archives/C9NNJ54B1/p1639043296152500, based on https://www.electronjs.org/docs/latest/tutorial/quick-start

cve-bin-tool

This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.

doom-emacs

An Emacs framework for the stubborn martian hacker

empty-fake-repo-for-ort

A crude fix for https://github.com/oss-review-toolkit/ort/issues/4433

fossology

FOSSology is a open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

grimoirelab

GrimoireLab: toolset for software development analytics

hercules

Gaining advanced insights from Git repository history.

kyria

Files related to the Kyria keyboard.

metaeffekt-universe

Project providing insights on the metaeffekt license database.

nix-doom-emacs

doom-emacs packaged for Nix

nixery

Container registry which transparently builds images using the Nix package manager

nixos-docker-sd-image-builder

Build custom SD images of NixOS for your Raspberry Pi (or any other supported AArch64 device) in 5-20 minutes.

packageurl-java

Java/JVM implementation of the package url spec

purl2cpe

This is a mapping of CPEs to package urls created by using VulnerableCode's data

rail-zephyr

scancode-toolkit

:mag_right: ScanCode detects licenses, copyrights, package manifests & dependencies and more by scanning code ... to discover and inventory open source and third-party packages used in your code.

service

The service side of clearlydefined.io

sw360

SW360 project

sw360vagrant

Vagrant scripting for sw360portal project.

vagrant-docker-swarm

Vagrant playground for Docker Swarm