OSCake

What it does

Artifact selection

The engine filters scan results to select artifacts needed in each license context and identifies missing information.checked 8 Oct 2026

Collection language

Its OSCC domain-specific language describes data to gather across licenses.checked 8 Oct 2026

Definition language

Its OSCF domain-specific language defines which data must accompany each component for compliant distribution.checked 8 Oct 2026

Examples

The repository includes example test cases consisting of OSCC files created by ORT and ZIP files containing additional ORT gathered data.checked 5 Oct 2026

Filtering and gaps

The OSCC generator derives OSCF from collected data by omitting unnecessary artifacts and marking what is missing for a valid OSCF.checked 5 Oct 2026

Generation flow

OSCake interprets OSCC into OSCF, then evaluates OSCF and external data to produce an OSCF.md compliance file.checked 5 Oct 2026

Inputs

OSCake is designed to use results gathered by ORT and compile a license adequate compliance file.checked 5 Oct 2026

Integration

The README describes using ORT-gathered results as input to OSCake.checked 8 Oct 2026

License

The project is licensed under Eclipse Public License 2.0 and the README states the software is provided “AS IS” without warranties or conditions.checked 8 Oct 2026

License aware output

The generated compliance file is intended to meet the requirements of the licenses involved in the package collection.checked 5 Oct 2026

Limits

The setup instructions require configuring an absolute repository path for a data directory in the OSCF generator.checked 8 Oct 2026

Output formats

OSCake derives an OSCF file from OSCC input and generates a Markdown compliance file from the OSCF file and external data.checked 8 Oct 2026

Purpose

OSCake is an Xtext/Xtend-based engine that turns package collection descriptions and their compliance artifacts into an Open Source Compliance File for distribution with the package collection.checked 8 Oct 2026

Security policy

The repository contains a SECURITY.md security policy file.checked 5 Oct 2026

Security reporting

The security policy asks reporters not to disclose vulnerabilities in public GitHub issues and directs privacy, security concept, and media questions to [email protected].checked 8 Oct 2026

Setup

The documented setup uses Eclipse IDE for Java and DSL Developers, with Xtext and Xtend available through Eclipse Marketplace as an alternative installation route.checked 8 Oct 2026

Support

The README lists GitHub issues and [email protected] as support and feedback channels.checked 8 Oct 2026

Technology

The project describes itself as based on Xtext and Xtend, with the DSLs defined and evaluated using those technologies.checked 5 Oct 2026

Two DSLs

OSCake defines OSCC, a weak compliance artifact language for data to gather, and OSCF, a strict language for defining data needed per component.checked 5 Oct 2026

Workflow

OSCake takes results gathered by ORT and compiles a license-appropriate compliance file.checked 8 Oct 2026