license-scanning

Fast Rust scanner for licenses, copyrights, package metadata, SBOMs, and provenance data.

CLI to scan project dependencies and produce a single HTML report

Scan Git history for detected SPDX license changes

Multi-language license scanning with SBOM generation — supports SPDX 2.3 and CycloneDX 1.5

Tool for reviewing the results of a license scan performed by the OSS Review Toolkit (ORT)

Simple script to install Fossology from sources

GitHub Action for FOSSA license scanning with detailed PR comments and policy violation reporting. Automates license compliance checks with intelligent violation analysis and actionable feedback.