
Endor Labs
7.4#2 in software composition analysis softwareFree planFree planWebAPIExtensionLinux
Visit
It suits development and security teams that need to scan code and dependencies or govern AI coding agents. The free tier may suit individual developers who want local scans.
OHRisk suits developers and teams who want license-risk findings in local workflows or GitHub Actions across its supported dependency inputs. It is less suited to projects relying on dependency sources or graph types it does not yet scan.