DejaCode
DejaCode is a complete enterprise-level application to automate open source license compliance and ensure software supply chain integrity, powered by ScanCode, the industry-leading code scanner.
Run scans and track all the open source and third-party products and components used in your software.
Apply usage policies at the license or component level, and integrate into ScanCode to ensure compliance.
Capture software inventories (SBOMs), generate compliance artifacts, and keep historical data.
Ensure FOSS compliance with enterprise-grade features and integrations for DevOps and software systems.
Scan a software package, simply by providing its Download URL, to get comprehensive details of its composition and create an SBOM.
Load software package data into DejaCode with the integration for the open source ScanCode.io and ScanCode Toolkit projects to create a product’s SBOM.
Track and report vulnerability tracking and reporting by integrating with the open source VulnerableCode project.
Create, publish and share SBOM documents in DejaCode, including detailed attribution documentation and custom reports in multiple file formats and standards, such as CycloneDX and SPDX.
Getting started
The DejaCode documentation is available here: https://dejacode.readthedocs.io/
If you have questions please ask them in Discussions.
If you want to contribute to DejaCode, start with our Contributing page.
Build and tests status
Tests |
Documentation |
|---|---|
DejaCode License Notice
DejaCode is an enterprise-level application to automate open source license compliance and ensure software supply chain integrity, powered by ScanCode, the industry-leading code scanner.
SPDX-License-Identifier: AGPL-3.0-only
Copyright (c) nexB Inc.
This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, version 3 of the License.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License along with this program. If not, see <https://www.gnu.org/licenses/>.
Commercial License option
DejaCode is offered under a nexB commercial license as an alternative. You can learn more about this option by contacting us at https://www.nexb.com/contact-us/
Release files for dejacode 5.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| dejacode-5.0.0.tar.gz | 15.3 kB | Without provenance | Details for dejacode-5.0.0.tar.gz |
Release files / dejacode-5.0.0.tar.gz
| Download URL | dejacode-5.0.0.tar.gz |
|---|---|
| Size | 15.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f01cc2215e048ae55ae8464d511402eb3d0d3a5c03b773c853bb56c64101eaa8
|
|
BLAKE2b-256 checksum How to use checksums |
e88db550d92a81b3d9b0b405edd011442cf88cfd50d2c859ff2b279cd485a63a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.2 CPython/3.10.13
|
Security for dejacode 5.0.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
