An open-source license compliance software system and toolkit for scanning licenses, copyrights, and export controls.
FOSSology is an open-source license compliance software system and toolkit that helps organizations identify licenses, copyrights, and export control issues in their software codebases. It provides both command-line tools for automated scanning and a web-based workflow system for managing compliance processes. The system generates SPDX reports and handles incremental scanning to efficiently analyze large projects.
Software development teams, legal compliance officers, and open-source program offices (OSPOs) in organizations that use or distribute open-source software and need to manage license obligations.
Developers choose FOSSology because it offers a comprehensive, scalable solution for open-source compliance that combines automated scanning with workflow management, supports industry-standard SPDX reporting, and provides deduplication to efficiently handle large codebases.
FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
FOSSology's deduplication feature rescans only changed files in new versions, saving significant time on large projects, as emphasized in the README for handling entire distributions.
It combines license, copyright, and export control scanning with one-click SPDX file generation, providing a full workflow for managing open-source obligations without legal advice.
Supports Docker, Vagrant, and traditional installations, including Docker Compose for multi-container setups, making it adaptable for development, testing, and production environments.
With Slack channels, mailing lists, and a CII Best Practices badge, FOSSology has a strong ecosystem for troubleshooting and contributions, as shown in the README badges.
Setting up FOSSology requires specific versions of PHP, PostgreSQL, and Apache, with manual dependency installation via scripts, making it more involved than plug-and-play tools.
The README cautions that the standalone Docker image lacks built-in data persistence for production, requiring external database configuration and careful volume management.
Documentation is being migrated to GitHub, which may lead to fragmented or outdated information, as noted in the README, potentially slowing down onboarding and troubleshooting.