Scan code for origin, license and vulnerabilities
Contributor: Kaushik Kumar
ScanCode-Toolkit relies on "required phrases" to prevent false positive license detections, but 74% of its rules currently lack this protection. To...
Contributor: Sampurna Pyne(Samk)
Currently, VulnerableCode lacks built-in insights to demonstrate its effectiveness. This project addresses this by integrating a telemetry dashboard...
Contributor: AayushKumar
The current directory browsing experience in ScanCode.io is limited to viewing one folder at a time, which becomes inefficient and cumbersome for...
Contributor: Alokkumar97
This project focuses on improving the accuracy and clarity of the detection_log by explicitly identifying when extra-words are detected during...
Contributor: Manit Singh
This project is about simplifying it to use ScanCode Toolkit and ScanCode.io in common CI/CD systems such as GitHub Actions, GitLab, Jenkins, and...
Contributor: Michael Ehab Mikhail
Currently, VulnerableCode runs importers in bulk where all the data from advisories are imported (and reimported) at once and stored to be displayed...
Contributor: Varsha U N
This project focuses to enhance SCIO by introducing a feature to store and manage packages that are downloaded and scanned. The goal is to add...
Contributor: Michael Ehab Mikhail
Implement a Firefox/Chrome browser extension that enables users to use VulnTotal from their browser. The idea is to use Pyodide to run the existing...
Contributor: Ambuj Kulshreshtha
There is a large number of pending tickets for data sources. This project focuses on adding more and more vulnerability data sources and consume...
Contributor: Pranay Das
I am developing a pypi package which will be responsible for calling OpenSSF scorecard API or CLI with an open-source github link and fetching the...
Contributor: swastkk
The project aims to improve scanning accuracy by computing summary and license clarity scores for each package and its files, rather than for the...
Contributor: Jay Kumar
Currently sctk uses pyahocorasick intbitset for license detection & lxml for creating cyclonedx-xml output formats. All three of them are currently...
Contributor: ziad hany
Software packages vulnerabilities : let's say we have a security team that wants to track new vulnerabilities in the open source software packages ,...
Contributor: lf32
Create a web app and JSON Rest API to detect any text for license, and submit bugs (SCTK-aaS). This project is to create a web-based mini application...
Contributor: Omkar Phansopkar
Refactor workbench to a React + Typescript implementation and improve various sections of the application including Table view, file uploads, data...
Contributor: Keshav Priyadarshi
VulnerableCode is a unique project that collates FOSS vulnerability data from numerous sources. This VulnTotal project will help cross-validate the...
Contributor: Kevin Ji
When doing license detection, ScanCode uses the licenses and rules in the ScanCode LicenseDB. The goal of this project is to extend the capabilities...
Contributor: ziad hany
There is a large number of pending tickets for data sources. We want to search for more vulnerability data sources and consume them . So I will...
Contributor: Avishrant Sharma
This project aims to provide a way to implement and integrate the likes of Google Licenseclassifier, GitHub Licensee, and other license detection and...
Contributor: Pratik Dey
The goal of this proposal is to refactor DeltaCode to use Scancode-Toolkit’s Virtual Codebase class. This refactoring will allow DeltaCode to be a...
Contributor: Akanksha Garg
Scancode uses various different techniques to detect licenses based on various multiple sequence alignments ,algorithms ,automations etc. but the...
Contributor: Hritik Vijay
VulnerableCode has a large number of pending tickets that require adding more data sources of known vulnerabilities (aka. importers). As importers...
Contributor: ROHIT POTTER
ScanCode is an opensource software and detects licenses, copyrights, package manifests & dependencies and more by scanning code. This allows to...
Contributor: Shivam Sandbhor
Software development is undergoing a gradual increase in pace. The direct result of this is more software vulnerabilities. Countless vulnerabilities...
Contributor: Abhishek Kumar
Python 2.7 has already retired and it will no longer be maintained therefore it will better to drop the support of Python 2. It will also include...
Contributor: ayansinha23
ScanCode license detection is using multiple techniques to accurately detect licenses based on automatons, inverted indexes, and multiple sequence...
Contributor: Tushar Goel
The goal of this project is to create a smart tool/library that provides a universal package and code download from VCS, web, ftp, etc.
Contributor: Arnav Mandal
DeltaCode is a tool to compare and report scan differences. It takes JSON files as an input which is the output of ScanCode-toolkit as well. When...
Contributor: AyushJain0402
About Code software scancode-toolkit currently is not available as distro's package and there is no official docker image available which is must...
Contributor: Abhishek_Kumar
Since Python 2.7 will retire in few months and no longer maintained.So it needs to be ported to python 3 and it must passed on both version of...
Contributor: Raju Koushik Gorantla
Building a project which uses ScanCode as a library in a web and REST API application that allows you to scan code on demand by entering a URL and...
Contributor: Ranvir Singh
This project is based on the building a web app that can take the user input of the plain-text code or it can take the input as the URL from where...
Contributor: Kartik Sibal
The usage of any open source software is primarily guided by the licenses binding it. Individuals/Organisations, generally make the decision of using...
Contributor: Yash D. Saraf
This project’s purpose is to create a decoupled plugin architecture for scancode such that it can handle plugins at different stages of a scan and...
