Find open source with open source,
with ScanCode.

ScanCode is the most effective and efficient open source tool for Software Composition Analysis (SCA), used and trusted by 4 of the 5 Big Tech companies.

ScanCode is the industry-leading open source SCA code scanner.

Identify licenses, copyrights, dependencies and other origin clues directly from your codebase.

  Support all programming languages and environments.

  Update license detection with data – no programming required.

  Run ScanCode Toolkit from the command line or automate SCA with ScanCode.io.

Automate SCA with ScanCode.io.

Powered by ScanCode Toolkit and 100% open source under Apache 2.0 and other business-friendly licenses.

Analyze a complete virtual machine image, or a single application package with customizable pipelines.

Integrate into DevOps workflows with comprehensive APIs.

Get the scan data you need to generate SBOMs.

Support all programming languages and environments.

Integrate with your DevOps workflows.

Run ScanCode.io on Docker or a server with unlimited deployment.

Create your own pipelines or use existing pipelines:

  • Docker images (even Windows)
  • Any codebase
  • Linux root filesystem
  • Packages

Trigger scanning pipelines on your code with API calls.

Get the scan data you need.

Organize scanning projects with persistent scan data, backed by a database.

Access through a business-friendly web UI or spreadsheets, and a developer-friendly REST API or command-line interface.

Generate an inventory of components and licenses used for compliance, including Software Bill of Materials (SBOMs).

Scan your codebase directly from the command line.

Or automate software composition analysis.

ScanCode is the industry-leading code scanning engine, used and trusted by 4 out of the 5 Big Tech companies:

Identify any open source components and their license compliance data in an application codebase.

Generate an inventory of components and their licenses to use as the baseline for your FOSS compliance process.

  100% open source under Apache 2.0 and other business-friendly licenses with support for all programming languages and environments.

To use ScanCode, either download ScanCode Toolkit and add it to your workflow directly or run ScanCode.io to automate the SCA process with comprehensive APIs, and customizable pipelines.

Open source is made possible by contributions from people like you!

The AboutCode stack is 100% open source and uses 100% open data. We are committed to the principles of open development. But we need your help.

We could really use your help to pay the folks building these open source projects. Sponsoring AboutCode projects on GitHub goes directly to the maintainers and developers working on open source AboutCode projects.

Need more hands-on support? Get help from the experts! nexB offers advanced support plans and other professional services.