aboutcode-org/scancode.io

View on GitHub

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

Stars: 215
Forks: 203
Open beginner issues: 0
Indexed issues: 416
Avg merge: 4d 8h
Merged PRs (30d): 6

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 13, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Open All

416 open issues indexed

Improving Source Mapping for .pyd Open

aboutcode-org/scancode.io#1847 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improving Source Mapping for .so Open

aboutcode-org/scancode.io#1848 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improving Source Mapping for .exe in rust projects Open

aboutcode-org/scancode.io#1849 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improving D2D mapping for npm - .map files Open

aboutcode-org/scancode.io#1859 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improving D2D mapping - generated files Open

aboutcode-org/scancode.io#1861 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improving D2D mapping for npm - Basename matching Open

aboutcode-org/scancode.io#1862 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Could not fetch nuget package from nuget.org Open

aboutcode-org/scancode.io#1863 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
The "map_deploy_to_develop" pipeline does not work for Nuget Open

aboutcode-org/scancode.io#1864 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Do not match .DS_Store files Open

bug

aboutcode-org/scancode.io#1874 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Compiled `.class` May Differ from Source Filename - map_deploy_to_devel (scala) Open

aboutcode-org/scancode.io#1875 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
CycloneDX SBOMs do not contain dependencies Open

bug

aboutcode-org/scancode.io#1877 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Multiple inputs should be reflected in generated SBOMs Open

enhancement

aboutcode-org/scancode.io#1878 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Use annotation and properties in SBOMs for additional details? Open

enhancement

aboutcode-org/scancode.io#1879 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Pipelines in 'Create Project' page are confusing Open

enhancement web-ui

aboutcode-org/scancode.io#1883 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
JVM d2d: match dependencies from pom.xml Open

aboutcode-org/scancode.io#1907 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Integration with more SCA tools Open

aboutcode-org/scancode.io#1908 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Use docker-compose for command line library for PURL binary validation Open

aboutcode-org/scancode.io#1913 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve SPDX import from Python SBOMs Open

bug medium priority

aboutcode-org/scancode.io#1914 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Direct dependencies missing if package is used as both direct and transitive dependency Open

bug

aboutcode-org/scancode.io#1918 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Reference Documentation Page: d2d options and capabilities Open

back2source documentation

aboutcode-org/scancode.io#1922 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Aggregate detailed origin scans Open

aboutcode-org/scancode.io#1923 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Identify and review data models of tools Open

aboutcode-org/scancode.io#1924 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Create standardized data models for origins Open

aboutcode-org/scancode.io#1925 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Create importers for detailed scan results Open

aboutcode-org/scancode.io#1926 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Determine code origin Open

aboutcode-org/scancode.io#1927 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Create origin test data set Open

aboutcode-org/scancode.io#1928 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Design and implement heuristics to combine origin matches Open

aboutcode-org/scancode.io#1929 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Design and implement heuristics to detect ultimate origin Open

aboutcode-org/scancode.io#1930 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Design and implement support for base, upstream "meta" package PURLs Open

aboutcode-org/scancode.io#1931 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Curate and review origin determination Open

aboutcode-org/scancode.io#1932 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Create origin review and curation UI Open

aboutcode-org/scancode.io#1933 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Propagate origin determination Open

aboutcode-org/scancode.io#1934 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Deploy curations to FederatedCode Open

aboutcode-org/scancode.io#1935 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
code-genetics: Create guide for origin curation and review Open

aboutcode-org/scancode.io#1936 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Create pipeline for scanning and indexing for nixpkgs Open

aboutcode-org/scancode.io#1937 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Design and implement Scancode pipeline for single nixpkg Open

aboutcode-org/scancode.io#1938 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
nixpkgs-clarity: Detect and report licensing issues in Nixpkgs Open

aboutcode-org/scancode.io#1939 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Automatically find and report issues for licenses in Nixpkgs Open

aboutcode-org/scancode.io#1940 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
nixpkgs-clarity: Improve and debug ScanCode license detection based on bugs and inaccuracies found in Nixpkgs Open

aboutcode-org/scancode.io#1941 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Ensure we can run d2d mapping with a single source/from and multiple binaries/to Open

aboutcode-org/scancode.io#1949 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Filter resources based on the matched package Open

aboutcode-org/scancode.io#1951 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
resolve_dependencies fails when multiple manifest files are present in a project Open

aboutcode-org/scancode.io#1957 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Use of deprecated field to state relationships in SBOM Open

bug

aboutcode-org/scancode.io#1958 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
`run` command does not support all scancode.io outputs Open

bug

aboutcode-org/scancode.io#1980 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Discussion: Automatic Releases Open

aboutcode-org/scancode.io#1992 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Compiled .class May Differ from Source Filename - map_deploy_to_devel (Java) Open

aboutcode-org/scancode.io#1993 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
maven-heaven: Collect list of suspected packages with shading Open

aboutcode-org/scancode.io#2058 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Candidates for integrations support Open

design-needed

aboutcode-org/scancode.io#2064 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Problem with mapping of licenseConcluded and licenseDeclared values when importing SPDX 2.3 SBOM Open

bug high priority

aboutcode-org/scancode.io#2143 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
maven-heaven: Attempt and check if build is reproducible for high assurance Open

aboutcode-org/scancode.io#2152 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/scancode.io

Get new issues in your inbox