@@ -58,31 +58,32 @@ Each AboutCode project has its own repository:
5858 scan-related tools in one process flow. This is the most popular project and
5959 is used by 100's of software teams . The lead maintainer is @pombredanne
6060
61- - ** [ Scancode.io] ( https://github.com/aboutcode-org/scancode.io ) ** : is a
61+ - ** [ Scancode.io] ( https://github.com/aboutcode-org/scancode.io ) ** : a
6262 web-based and API to run and review scans in rich scripted pipelines, on
6363 different kinds of containers, docker images, package archives, manifests
6464 etc, to get information on licenses, copyrights, source, vulneribilities.
6565 The lead maintainer is @tdruez
6666
67- - ** [ VulnerableCode] ( https://github.com/aboutcode-org/vulnerablecode ) ** : is a
67+ - ** [ VulnerableCode] ( https://github.com/aboutcode-org/vulnerablecode ) ** : a
6868 web-based API and database to collect and track all the known software
6969 package vulnerabilities, with affected and fixed packages, references and a
7070 standalone tool Vulntotal to compare this vulneribility information across
7171 similar tools. This is maintained by @tg1999 and @pombredanne
7272
73- - ** [ DejaCode] ( https://github.com/aboutcode-org/dejacode ) ** : is a
74- complete enterprise-level application to automate open source license
75- compliance and ensure software supply chain integrity.
76-
77- - ** [ univers] ( https://github.com/aboutcode-org/univers ) ** is a package to
73+ - ** [ univers] ( https://github.com/aboutcode-org/univers ) ** : a package to
7874 parse and compare all the package versions and all the ranges.
7975
80- - ** [ purlDB] ( https://github.com/aboutcode-org/purldb ) ** consists of tools to
81- create and expose a database of purls (Package URLs) and also has package
76+ - ** [ purlDB] ( https://github.com/aboutcode-org/purldb ) ** : tools to
77+ create and expose a database of purls (Package URLs) along with package
8278 data for all of these packages created from scans. This is maintained by
8379 @jyang
8480
85- - ** [ FetchCode] ( https://github.com/aboutcode-org/fetchcode ) ** is a library to
81+ - ** [ DejaCode] ( https://github.com/aboutcode-org/dejacode ) ** : a
82+ complete enterprise-level application, powered by ScanCode,
83+ VulnerableCode and purlDB, to automate open source license
84+ compliance and ensure software supply chain integrity.
85+
86+ - ** [ FetchCode] ( https://github.com/aboutcode-org/fetchcode ) ** : a library to
8687 reliably fetch any code via HTTP, FTP and version control systems such as
8788 git.
8889
@@ -101,8 +102,8 @@ Each AboutCode project has its own repository:
101102 Docker images using static analysis. Maintained by @pombredanne
102103
103104- ** [ python-inspector] ( https://github.com/aboutcode-org/python-inspector ) **
104- and ** [ nuget inspector] ( https://github.com/aboutcode-org/nuget-inspector/ ) **
105- inspects manifests and code to resolve dependencies (vulnerable and
105+ and ** [ nuget inspector] ( https://github.com/aboutcode-org/nuget-inspector/ ) ** :
106+ tools to inpsect manifests and code to resolve dependencies (vulnerable and
106107 non-vulnerable) for python and nuget packages respectively.
107108
108109- ** [ license-expression] ( https://github.com/aboutcode-org/license-expression/ ) ** :
@@ -132,11 +133,12 @@ Each AboutCode project has its own repository:
132133
133134We have also co-started and worked closely with other FOSS orgs and projects:
134135
135- - [ Package URL] ( https://github.com/package-url ) : a widely used standard to
136- reference software packages of all types with simple, readable and concise
137- URLs.
136+ - [ Package URL] ( https://github.com/package-url ) : a widely used standard to identify
137+ precisely software packages of all types with simple, readable and concise URLs.
138+ The PURL standard is currently being prepared for Ecma standardization.
139+ See https://github.com/package-url/purl-spec/discussions for more details.
138140
139- - [ SPDX] ( http://SPDX.org ) : aka. Software Package Data Exchange, a spec to
141+ - [ SPDX] ( http://SPDX.org ) : aka System Package Data Exchange, a spec to
140142 document the origin and licensing of packages.
141143
142144- [ CycloneDX] ( https://cyclonedx.org ) aka. OWASP CycloneDX is a full-stack Bill
0 commit comments