DejaCode
6.3#6 in open source license compliance softwareFrom $500 a monthWebAPILinuxSelf-hosted
Visit| Fact | DejaCode | SourceTrust |
|---|---|---|
| Founded | 2003 | 2026 |
| Headquarters | United States | Copenhagen, Denmark |
| Integrations | Documented platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services. | The site lists GitHub, GitLab, and Azure DevOps repository connections, plus lockfile and SBOM imports. |
| Inventory | It tracks open-source and third-party components across products and supports unlimited products, components, and packages in each plan. | It gathers direct and transitive dependencies from repositories, lockfiles, and SBOMs into one inventory. |
| Purpose | DejaCode is an enterprise application for automating open-source license compliance and software supply-chain integrity. | SourceTrust helps teams review third-party software licenses and publish a shareable license compliance page for products they ship. |
| Support | Team and Business plans list technical training and web and email support. | SourceTrust offers a live walkthrough and lists [email protected] for platform questions. |
DejaCode suits legal and business managers responsible for open-source governance across multiple products and teams. It may also suit organizations that need SBOM history and license- or package-level policies.
SourceTrust suits teams that need to review dependencies and publish license compliance information for shipped products. Eligible public GitHub projects may qualify for its free publishing option; it is software tooling, not legal advice.