ScanCode Toolkit
6.2#9 in open source license compliance softwareFree planFree planAPILinuxmacOSSelf-hosted
Visit| Fact | ScanCode Toolkit | SourceTrust |
|---|---|---|
| Founded | 2003 | 2026 |
| Headquarters | Los Altos, California, United States | Copenhagen, Denmark |
| Purpose | ScanCode Toolkit scans codebases to detect code origin, copyrights, licenses, vulnerabilities, packages and dependencies. | SourceTrust helps teams review third-party software licenses and publish a shareable license compliance page for products they ship. |
| Support | The project directs users to its community Slack and GitHub discussions for questions and challenges. | SourceTrust offers a live walkthrough and lists [email protected] for platform questions. |
It suits developers and organizations that need to inspect codebases for licensing, provenance, vulnerabilities, and dependency details. Its command-line and library options support both direct scanning and use within applications.
SourceTrust suits teams that need to review dependencies and publish license compliance information for shipped products. Eligible public GitHub projects may qualify for its free publishing option; it is software tooling, not legal advice.