Repositories list

• vulnerablecode

  Public
  A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https:…

  securityvulnerabilitysnyk+ 15

  securityvulnerabilitysnykvulnerability-databasesvulndbcvecpenvdvulnerability-detectionosv+ 8

  Python

  •

  Apache License 2.0

  •303303 forks•662662 stars•685685 issues•102102 pull requests•Updated May 4, 2026May 4, 2026

• aboutcode-mirror-nuget-catalog

  Public
  Append-only mirror of NuGet Catalog, updated hourly

  Python

  •33 forks•22 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• purlvalidator-go

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2

  fstpurlairgappedsbom-toolpackageurl

  Go

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• purl-validator.rs

  Public
  Offline Package URL validator using a prebuilt FST of known packages.

  fstpurlairgapped+ 2

  fstpurlairgappedsbom-toolpackageurl

  Rust

  •

  Apache License 2.0

  •22 forks•00 stars•11 issue•11 pull request•Updated May 4, 2026May 4, 2026

• aboutcode-mirror-euvd

  Public
  Mirror of European Union Vulnerability Database (EUVD)

  mirrorvulnerabilityeuvd

  mirrorvulnerabilityeuvd

  Python

  •11 fork•11 star•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• aboutcode-mirror-alpine-secdb

  Public
  Alpine Linux Security Database Mirror https://secdb.alpinelinux.org/

  00 forks•00 stars•00 issues•00 pull requests•Updated May 4, 2026May 4, 2026

• www.aboutcode.org

  Public
  Docusaurus/markdown-based repository for the aboutcode.org website.

  JavaScript

  •1414 forks•55 stars•5656 issues•33 pull requests•Updated May 3, 2026May 3, 2026

• aboutcode-mirror-kev

  Public
  AboutCode Mirror for CISA Known Exploited Vulnerabilities

  44 forks•11 star•00 issues•00 pull requests•Updated May 2, 2026May 2, 2026

• commoncode

  Public
  A library of common functions shared in many other AboutCode projects

  Python

  •2222 forks•44 stars•1313 issues•33 pull requests•Updated May 1, 2026May 1, 2026

• scancode-plugins

  Public
  A set of plugins either delivered as builtin scancode-toolkit or extra plugins

  HTML

  •1111 forks•22 stars•1616 issues•88 pull requests•Updated May 1, 2026May 1, 2026

• univers

  Public
  Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is spons…

  package-managerversioningversion+ 7

  package-managerversioningversionvulnerabilitiesdependenciesosvdependency-resolverpurlpackage-urlvulnerablecode

  Python

  •2121 forks•4545 stars•5454 issues•1414 pull requests•Updated May 1, 2026May 1, 2026

• scancode-toolkit

  Public
  :mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your cod…

  licensingpackagesopen-source-licensing+ 17

  licensingpackagesopen-source-licensingdependency-graphprovenancedependencieslicensespdxcopyrightsca+ 10

  Python

  •720720 forks•2.5k2.5k stars•1.3k1.3k issues•172172 pull requests•Updated May 1, 2026May 1, 2026

• dejacode

  Public
  Automate open source license compliance and ensure software supply chain integrity

  open-sourcevulnerabilitieslicense+ 7

  open-sourcevulnerabilitieslicensespdxscascancodepurlpackage-urlcyclonedxfoss-compliance

  Python

  •

  GNU Affero General Public License v3.0

  •2020 forks•4444 stars•8181 issues•22 pull requests•Updated May 1, 2026May 1, 2026

• purldb

  Public
  Tools to create and deploy a database of software packages metadata, origin, dependencies, and license keyed by PURLs (Package URLs). Supported by AboutCode, sp…

  purlpackage-url

  purlpackage-url

  HTML

  •6868 forks•6363 stars•304304 issues•2525 pull requests•Updated Apr 30, 2026Apr 30, 2026

• scancode.io

  Public
  ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, t…

  dockeropen-sourcevirtual-machine+ 13

  dockeropen-sourcevirtual-machinecode-analysisvulnerabilitiesbinary-analysislicensespdxscascancode+ 6

  Python

  •

  Apache License 2.0

  •191191 forks•201201 stars•419419 issues•5050 pull requests•Updated Apr 30, 2026Apr 30, 2026

• thirdparty-packages

  Public
  A collection of various pre-built thirdparty packages with their corresponding source code

  HTML

  •22 forks•11 star•22 issues•00 pull requests•Updated Apr 29, 2026Apr 29, 2026

• cyseq

  Public
  Python

  •11 fork•11 star•11 issue•00 pull requests•Updated Apr 27, 2026Apr 27, 2026

• typecode

  Public
  TypeCode provides comprehensive filetype and mimetype detection using multiple detectors including libmagic (included as a dependency for Linux, Windows and mac…

  Python

  •1414 forks•1010 stars•1111 issues•11 pull request•Updated Apr 24, 2026Apr 24, 2026

• scancode-licensedb

  Public
  A free and open database of all the licenses, in particular all the open source software licenses

  fosslicensescancode-toolkit+ 1

  fosslicensescancode-toolkitscancode-licensedb

  Makefile

  •1111 forks•6363 stars•2121 issues•44 pull requests•Updated Apr 23, 2026Apr 23, 2026

• django-altcha

  Public
  Django field and widget for Altcha CAPTCHA.

  open-sourcedjangocaptcha+ 1

  open-sourcedjangocaptchaaltcha

  Python

  •

  MIT License

  •55 forks•99 stars•33 issues•11 pull request•Updated Apr 21, 2026Apr 21, 2026

• aboutcode.federated

  Public
  Federated data utilities

  Python

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 18, 2026Apr 18, 2026

• nuget-inspector

  Public
  Inspect and resolve .NET and NuGet package dependencies like dotnet and nuget do. Fetch manifests data. Runs on Linux, Windows and macOS as a standalone applica…

  package-managerdotnetnuget+ 2

  package-managerdotnetnugetdependenciesdependency-resolver

  C#

  •1010 forks•55 stars•2626 issues•44 pull requests•Updated Apr 17, 2026Apr 17, 2026

• skeleton

  Public template
  Python

  •99 forks•99 stars•3333 issues•00 pull requests•Updated Apr 16, 2026Apr 16, 2026

• aboutcode

  Public
  AboutCode project: tools and data to uncover things about code: the provenance, origin, license, and more (packages, security, quality, etc.) of FOSS code. Get…

  securitylicensesca+ 5

  securitylicensescascancodepurlsbomaboutcodedejacode

  Batchfile

  •

  Apache License 2.0

  •248248 forks•291291 stars•2222 issues•5252 pull requests•Updated Apr 14, 2026Apr 14, 2026

• aboutcode-toolkit

  Public
  :white_check_mark: AboutCode Toolkit provides a simple way to document provenance metadata (origin and license) about third-party code that you use in your proj…

  Python

  •4949 forks•9999 stars•66 issues•66 pull requests•Updated Apr 14, 2026Apr 14, 2026

• scancode-analyzer

  Public
  scancode-results-analyzer

  Python

  •33 forks•44 stars•1717 issues•22 pull requests•Updated Apr 13, 2026Apr 13, 2026

• python-inspector

  Public
  Inspect Python code and PyPI package manifests. Resolve Python dependencies.

  pythonpipdependency-resolver

  pythonpipdependency-resolver

  Python

  •2727 forks•2424 stars•6969 issues•66 pull requests•Updated Apr 10, 2026Apr 10, 2026

• scancode-action

  Public
  Run ScanCode.io pipelines from your Workflows

  licensespdxscancode+ 1

  licensespdxscancodecyclonedx

  Apache License 2.0

  •77 forks•1212 stars•55 issues•33 pull requests•Updated Apr 2, 2026Apr 2, 2026

• packageurl-java

  Public
  Java/JVM implementation of the package url spec

  Java

  •

  MIT License

  •2424 forks•00 stars•00 issues•00 pull requests•Updated Mar 25, 2026Mar 25, 2026

• fetchcode

  Public
  A library to reliably fetch code via HTTP, FTP and version control systems. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydat…

  HTML

  •2323 forks•1212 stars•5454 issues•1010 pull requests•Updated Mar 18, 2026Mar 18, 2026