aboutcode-org

aboutcode-org/scancode-toolkit

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

2.6K stars 741 forks 2.6K watchers Python Other

copyright copyright-scan cyclonedx dependencies dependency-graph license license-checking license-scan licensing open-source-licensing oss-compliance package-url packages provenance purl sbom sca software-composition-analysis spdx spdx-licenses

View on GitHub Website

32 Open Issues Need Help Last updated: Jul 3, 2026

Open Issues Need Help

View All on GitHub

Support directories in `referenced_filenames` for rules 1 day ago

good first issue improve-license-detection

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add dependencies to RPMs 20 days ago

package scan good first issue dependencies package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add dependencies to NuGet 20 days ago

new feature package scan good first issue dependencies package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support gradle "module" metadata 20 days ago

good first issue package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add support for symfony.lock 20 days ago

new feature package scan easy good first issue dependencies package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add support for luarocks spec 20 days ago

bug good first issue package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support Componentjs component.json 20 days ago

nice to have good first issue package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Parse pip cache dir 20 days ago

new feature easy good first issue package-formats codeday

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support `pylock.toml` 20 days ago

package scan good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

[RFC] Upgrade HTML output about 1 month ago

license scan new feature GUI and outputs good first issue summaries RFC

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Ensure that we check the YAML syntax of license data files in tests. about 1 month ago

license scan installation and packaging easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Infer `bug_tracking_url` and `code_view_url` from `vcs_url` for major code hosting platforms 3 months ago

good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Validate that we can detect this modified Apache license 3 months ago

license scan new and improved data easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support new yarn-v2 ways of handling node modules with "plug and play" 3 months ago

new feature good first issue dependencies package-formats hacktoberfest

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Improve license detection of declared RPM licenses 3 months ago

bug license scan good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Collect publiccode metadata as package-like data 3 months ago

package scan easy good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Scan and review https://github.com/emweb/wt/blob/8ada2e04a1a5ced7e865769d19a9b69b183fc39a/doc/licenses.md?plain=1#L153 for correctness 3 months ago

license scan easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Author not detected in C++ file 4 months ago

bug copyright scan easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Detect and collect dependencies from gradle cache 4 months ago

package scan good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support Bazel modules 4 months ago

easy good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Ensure we can collect the latest package-lock.json including file indirections for versions 5 months ago

new feature good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add support for citation file format 5 months ago

easy good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

License detection issue in https://github.com/kulshekhar/ts-jest 5 months ago

license scan new and improved data easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

`is_manifest` flag is not accurately determined 5 months ago

bug good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add/improve support for OSGI bundle metadata from bnd 6 months ago

new feature package scan good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Add license id mapping for bintray license keys 6 months ago

license scan new and improved data easy good first issue license-review

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Invalid copyright not detected 6 months ago

copyright scan easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Treat Dockerfile and Containerfile as "non-assembled" package data, collect OCi labels 6 months ago

package scan good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Parse npmrc 6 months ago

new feature easy good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support Python private packages 6 months ago

enhancement package scan good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Align the licensedb UI and UX with SCIO/VCIO (e.g., using Bulma) 6 months ago

easy good first issue

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses

Support rust makepkg’s .SRCINFO files 8 months ago

good first issue package-formats

aboutcode-org/scancode-toolkit

2.6K

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Python

#copyright#copyright-scan#cyclonedx#dependencies#dependency-graph#license#license-checking#license-scan#licensing#open-source-licensing#oss-compliance#package-url#packages#provenance#purl#sbom#sca#software-composition-analysis#spdx#spdx-licenses