Repositories list

• aboutcode-mirror-nuget-catalog

  Public
  Append-only mirror of NuGet Catalog, updated hourly

  Python

  •3•1•0•0•Updated Feb 11, 2026Feb 11, 2026

• aboutcode-toolkit

  Public
  :white_check_mark: AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your proj…

  Python

  •49•98•6•11•Updated Feb 11, 2026Feb 11, 2026

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  4•1•0•0•Updated Feb 11, 2026Feb 11, 2026

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7spdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •19•39•88•5•Updated Feb 10, 2026Feb 10, 2026

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https:…

  securityvulnerabilitysnyk+ 15vulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •277•645•672•80•Updated Feb 10, 2026Feb 10, 2026

• aboutcode-mirror-alpine-secdb

  Public
  Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

  0•0•0•0•Updated Feb 10, 2026Feb 10, 2026

• purlvalidator-go

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2sbom-toolpackageurl

  Go

  •

  Apache License 2.0

  •0•0•0•0•Updated Feb 7, 2026Feb 7, 2026

• purl-validator.rs

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2sbom-toolpackageurl

  Rust

  •

  Apache License 2.0

  •2•0•1•2•Updated Feb 7, 2026Feb 7, 2026

• www.aboutcode.org

  Public
  Docusaurus/markdown-based repository for the aboutcode.org website.

  JavaScript

  •14•3•56•3•Updated Feb 6, 2026Feb 6, 2026

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code. Get…

  securitylicensesca+ 5scancodepurlsbomaboutcodedejacode

  Batchfile

  •229•273•32•46•Updated Feb 5, 2026Feb 5, 2026

• purldb

  Public
  Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sp…

  purlpackage-url

  HTML

  •51•59•289•13•Updated Feb 5, 2026Feb 5, 2026

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, t…

  dockeropen-sourcevirtual-machine+ 13code-analysisvulnerabilitiesbinary-analysislicensespdxscascancode+ 6

  Python

  •

  Apache License 2.0

  •169•177•422•51•Updated Feb 5, 2026Feb 5, 2026

• scancode-toolkit

  Public
  :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your cod…

  licensingpackagesopen-source-licensing+ 17dependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •693•2.5k•1.2k•125•Updated Feb 3, 2026Feb 3, 2026

• univers

  Public
  Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is spons…

  package-managerversioningversion+ 7vulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •19•39•50•12•Updated Feb 2, 2026Feb 2, 2026

• matchcode-toolkit

  Public
  A collection of plugins that makes matchcode-related functions available for scancode-toolkit and scancode.io.

  C

  •2•6•0•0•Updated Jan 24, 2026Jan 24, 2026

• vulnerablecode-ai-experiments

  Public
  Experiments with AI to analyze vulnerabilities

  Python

  •4•2•4•5•Updated Jan 23, 2026Jan 23, 2026

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1scancode-licensedb

  Makefile

  •10•58•21•3•Updated Jan 22, 2026Jan 22, 2026

• container-inspector

  Public
  container-inspector is a suite of analysis utilities and command line tools for Docker container images, their layers and how these relate to each other. It can…

  dockerdocker-imagecontainer+ 3oci-imagecontainer-imagecontainer-analysis

  Python

  •10•37•19•5•Updated Jan 21, 2026Jan 21, 2026

• source-inspector

  Public
  Tools to inspect source code and code symbols

  C

  •2•2•12•0•Updated Jan 20, 2026Jan 20, 2026

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •2•1•2•0•Updated Jan 13, 2026Jan 13, 2026

• typecode

  Public
  TypeCode provides comprehensive filetype and mimetype detection using multiple detectors including libmagic (included as a dependency for Linux, Windows and mac…

  Python

  •13•9•12•2•Updated Jan 9, 2026Jan 9, 2026

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •22•4•11•2•Updated Jan 8, 2026Jan 8, 2026

• django-altcha

  Public
  Django field and widget for Altcha CAPTCHA.

  open-sourcedjangocaptcha+ 1altcha

  Python

  •

  MIT License

  •2•6•2•0•Updated Jan 5, 2026Jan 5, 2026

• binary-inspector

  Public
  A library and tools to inspect binaries (elf, winpe, mach0) for dependencies, symbols and other info, and models to store this.

  Python

  •0•1•8•0•Updated Dec 29, 2025Dec 29, 2025

• skeleton

  Public template
  Python

  •9•8•34•0•Updated Dec 15, 2025Dec 15, 2025

• scancode-analyzer

  Public
  scancode-results-analyzer

  Python

  •3•4•15•1•Updated Dec 10, 2025Dec 10, 2025

• rpm-inspector

  Public
  A Python library to collect data from RPM packages including installed packages.

  Batchfile

  •0•0•1•0•Updated Dec 10, 2025Dec 10, 2025

• packageurl.rs

  Public
  Rust implementation of the Package URL specification.

  Rust

  •

  MIT License

  •15•0•0•0•Updated Dec 4, 2025Dec 4, 2025

• packageurl-php

  Public
  PHP implementation of the package url spec

  PHP

  •

  MIT License

  •7•1•0•0•Updated Dec 4, 2025Dec 4, 2025

• packageurl-go

  Public
  Go implementation of the package url spec

  Go

  •

  MIT License

  •53•0•0•0•Updated Dec 4, 2025Dec 4, 2025