EverythingXiaomi
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your app
Vendor dashboard

DejaCode

C
C tier on Open Source License Compliance SoftwareScore 6.4 · #18 of 28
Android app
Not listed
Free plan
Trial only
Paid plans from
$500/mo
Runs on
api, Linux, self-hosted, Web
Visit site Alternatives

Summary

DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity. It tracks open-source and third-party components across products, with unlimited products, components, and packages in each plan. Teams can capture and manage SBOMs, keep historical records for audits, and define usage policies at the license or package level. DejaCode’s documented integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services. It also connects with AboutCode tools for package scanning and vulnerability data. Available as a web application, API, Linux software, and self-hosted deployment, it is aimed at legal and business managers overseeing open-source use across products and teams. Plans include paid Team and Business tiers, while Enterprise pricing is custom; a private evaluation instance with all features and support is available for 30 days.

Who it is for

DejaCode suits legal and business managers responsible for open-source governance across multiple products and teams. It may also suit organizations that need SBOM history and license- or package-level policies.

What is good

  • Tracks components across unlimited products, components, and packages.
  • Stores SBOMs and historical audit data.
  • Supports CycloneDX, SPDX, and AboutFile imports.
  • Includes integrations with GitHub, GitLab, and Jira Cloud.
  • Offers a private evaluation with all features for 30 days.

What to know first

  • Team starts at 500.00 USD per month, billed annually.
  • Business starts at 1500.00 USD per month, billed annually.
  • Enterprise pricing is custom and not listed.

Verdict

DejaCode brings component tracking, SBOM management, and usage policies into one application for open-source governance. Its plans include a 30-day private evaluation, while paid subscriptions are billed annually.

DejaCode plans and pricing

All plans
Team $500/mo Annual subscription paid at the start of the subscription period Starting at 5 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation nexb.com · 4 Oct 2026
Business $1,500/mo Annual subscription paid at the start of the subscription period Starting at 25 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation nexb.com · 4 Oct 2026
Enterprise Not published Custom based on your requirements; annual subscription paid at the start of the subscription period Starting at 50 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation nexb.com · 4 Oct 2026

Compared on open source license compliance software

Policy enforcement
advisorypublic.dejacode.com
Obligation tracking
Yespublic.dejacode.com
Attribution reports
Yespublic.dejacode.com
SBOM import formats
CycloneDX, SPDX, AboutFilepublic.dejacode.com
Deployment options
bothpublic.dejacode.com
Source scan methods
multiplepublic.dejacode.com

Facts

Purpose
DejaCode is an enterprise application for automating open-source license compliance and software supply-chain integrity.github.com · 4 Oct 2026
Inventory
It tracks open-source and third-party components across products and supports unlimited products, components, and packages in each plan.nexb.com · 4 Oct 2026
SBOMs
It can capture, store, and manage SBOMs and maintain historical data for audits.public.dejacode.com · 4 Oct 2026
Policies
Users can define and apply usage policies at the license or package level and integrate them with ScanCode.public.dejacode.com · 4 Oct 2026
Integrations
Documented platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services.dejacode.readthedocs.io · 4 Oct 2026
AboutCode tools
Its documented AboutCode integrations include ScanCode.io for package scanning, PurlDB, and VulnerableCode for vulnerability data.dejacode.readthedocs.io · 4 Oct 2026
Deployment
The documentation describes Docker-based installation, enterprise deployment, and local development installation.dejacode.readthedocs.io · 4 Oct 2026
Security guidance
For enterprise deployments, the documentation recommends running your own ScanCode.io, PurlDB, and VulnerableCode instances so sensitive or private data is not submitted to public endpoints.dejacode.readthedocs.io · 4 Oct 2026
Private trial
A private evaluation instance supports customer data and all features, includes free support, and is limited to 30 days.public.dejacode.com · 4 Oct 2026
Support
Team and Business plans list technical training and web and email support.nexb.com · 4 Oct 2026
Audience
The maker describes DejaCode as a SaaS enterprise application for legal and business managers to manage open-source usage and governance across products and teams.nexb.com · 4 Oct 2026
Open source
The DejaCode repository identifies its license as GNU Affero General Public License version 3.github.com · 4 Oct 2026

Company

Founded
2003public.dejacode.com · 28 Sept 2026
Headquarters
United Statespublic.dejacode.com · 28 Sept 2026

Best DejaCode alternatives

See all 20
Btier FOSSology #1 7.2 FreeBtier OHRisk #2 7.1 FreeBtier ScanCode Toolkit #3 7.1 FreeBtier Apache Flink CDC #4 7.0 FreeBtier licscan #5 7.0 FreeBtier SourceTrust #6 7.0 $24.92/mo

Where it ranks on Everything Xiaomi

Is DejaCode yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DejaCode

Sources