AboutCode Project Overview

The primary current AboutCode projects are:

• ScanCode Toolkit: is a code scanning “engine” and command-line tool to detect the provenance and license of code and its dependencies. ScanCode TK is a command-line tool with many scanning options and output formats (JSON, HTML, CSV or SPDX). ScanCode detects licenses, copyrights, package manifests and more in both source code and binary files. There is already a large set of pre- and post-plugins and you can also create your own plugins.

  • Read more at: https://scancode-toolkit.readthedocs.io

  • Get the code at: https://github.com/aboutcode-org/scancode-toolkit

• ScanCode.io: is a Cloud application server that automates Software Composition Analysis with pipelines. ScanCode.io has standard pipelines for Docker and VM images, root filesystems and packages. ScanCode.io organizes these complex code analyses as scripted pipelines and stores the results in its database for automated code analysis.

  • Read more at: https://scancodeio.readthedocs.io

  • Get the code at: https://github.com/aboutcode-org/scancode.io

• ScanCode Workbench: is a desktop application (based on Electron) to review the results of a scan and document your conclusions about the origin and license of software components and packages.

  • Read more at: https://scancode-workbench.readthedocs.io

  • Get the code at: https://github.com/aboutcode-org/scancode-workbench

• VulnerableCode: is an early stage project to provide a free and open source database of vulnerabilities and the packages they impact with tools to aggregate and correlate those vulnerabilities. The initial development of VulnerableCode was supported by the NLNet Foundation.

  • Read more at: https://vulnerablecode.readthedocs.io

  • Get the code at: https://github.com/aboutcode-org/vulnerablecode

• AboutCode Toolkit: AboutCode Toolkit provides a set of command-line tools to generate Attribution documents and software BOM reports from any source. It also provides a standard ABCD format for yaml files to document software provenance and license metadata in a codebase where this is not already covered by a package manager.

  • Read more at: https://aboutcode-toolkit.readthedocs.io

  • Get the code at: https://github.com/aboutcode-org/aboutcode-toolkit