29 projects
minecode-pipeline
A library for mining packageURLs and package metadata from ecosystem repositories.
fetchcode
fetchcode is a library to reliably fetch code via HTTP, FTP and version control systems.
aboutcode-toolkit
AboutCode-toolkit is a tool to document the provenance (origin and license) of third-party software using small text files. Collect inventories and generate attribution documentation.
pygmars
Craft simple regex-based small language lexers and parsers. Build parsers from grammars and accept Pygments lexers as an input. Derived from NLTK.
binary-inspector
binary-inspector is a library and tools to inspect binaries (elf, winpe, mach0) for symbols and other information, and models to store this.
univers
A mostly universal library to parse and compare software package versions and version ranges. A companion to Package URLs.
pkginfo2
Query metadata from sdists / bdists / installed packages. Safer fork of pkginfo to avoid doing arbitrary imports and eval.
extractcode
A mostly universal archive extractor using 7zip, libarchive and the Python standard library for reliable archive extraction.
python-inspector
python-inspector is is a collection of utilities to collect PyPI package metadata and resolve packages dependencies.
rust-inspector
rust-inspector is a scancode plugin to extract symbols and dependencies found in Rust binaries.
minecode-pipelines
A library for mining packageURLs and package metadata from ecosystem repositories.
scancode-toolkit-mini
ScanCode is a tool to scan code for license, copyright, package and their documented dependencies and other interesting facts. scancode-toolkit-mini is a special build that does not come with pre-built binary dependencies by default. These are instead installed separately or with the extra_requires scancode-toolkit-mini[full]
debian-inspector
Utilities to parse Debian package, copyright and control files.
cyseq
"A Cython version of ScanCode-toolkit's licensedcode.seq"
scancode-analyzer
A scancode-toolkit plugin to analyze scan results for License Detection Issues
android-inspector
A collection of ScanCode.io pipelines dedicated to Android APK analysis.
scancodeio
Automate software composition analysis pipelines
boolean.py
Define boolean algebras, create and parse boolean expressions and create custom boolean DSL.
scancode-toolkit
ScanCode is a tool to scan code for license, copyright, package and their documented dependencies and other interesting facts.
source-inspector
source-inspector
license-expression
license-expression is a comprehensive utility library to parse, compare, simplify and normalize license expressions (such as SPDX license expressions) using boolean logic.
commoncode
Set of common utilities, originally split from ScanCode
purl-validator
purl-validator
samecode
A library to help detect approximately code such as AI-generated code.
packageurl-python
A purl aka. Package URL parser and builder
container-inspector
Docker, containers, rootfs and virtual machine related software composition analysis (SCA) utilities.
vulnerablecode
VulnerableCode is a free and open database of open source software package vulnerabilities because open source software vulnerabilities data and tools should be free and open source themselves.
py-tree-sitter-swift
Swift grammar for tree-sitter, fork of main
typecode
Comprehensive filetype and mimetype detection using libmagic and Pygments.