
FOSSology
7.5#2 in open source license compliance softwareFree planFree planWebAPILinuxmacOS
Visit
| Fact | FOSSology | OHRisk |
|---|---|---|
| License | The main source is GPL-2.0; libfossdb and libfossrepo are exceptions licensed LGPL-2.1. | The repository provides Ohrisk under the MIT License. |
| Purpose | FOSSology is an open-source license-compliance system and toolkit for scanning software for license, copyright, and export-control information. | Ohrisk is a local CLI that catches open-source license risk before a pull request ships. |
FOSSology is aimed at companies, individuals, and groups seeking to improve their open-source license compliance processes. It may also suit teams that need scan results and reports integrated into CI/CD workflows.
OHRisk suits developers and teams who want license-risk findings in local workflows or GitHub Actions across its supported dependency inputs. It is less suited to projects relying on dependency sources or graph types it does not yet scan.