spdx

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

🔎 ScanCode detects licenses, copyrights, package manifests & dependencies and more by scanning code ... to discover and inventory open source and third-party packages used in your code.

A suite of tools to assist with reviewing Open Source Software dependencies.

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

Various data formats for the SPDX License List including RDFa, HTML, Text, and JSON

📜 Cargo plugin to generate list of all licenses for a crate 🦀

Reliable project licenses detector.

The tool for checking and helping with compliance with the REUSE recommendations

The SPDX specification in MarkDown and HTML formats.

Software Bill of Material (SBOM) standard designed for use in application security contexts and supply chain component analysis

write licenses to stdout

Creates CycloneDX Software Bill of Materials (SBOM) from Maven projects

A utility to generate SPDX-compliant Bill of Materials manifests

licensechecker (lc) a command line application which scans directories and identifies what software license things are under producing reports as either SPDX, CSV, JSON, XLSX or CLI Tabular output. Dual-licensed under MIT or the UNLICENSE.

SPDX Tools

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

Creates CycloneDX Software Bill of Materials (SBOM) from Python projects and environments.

💥 Full-fledged CLI tool to generate and package node modules compliant with Browser and NodeJS. Packer CLI support all modern style, unit test and script transpiler tools

Creates CycloneDX Software Bill of Materials (SBOM) from Node.js projects