Skip to content
SPECIFICTION
Get listed

FOSSLight Hub

fosslight.org

Free plan WebAPISelf-hosted
Visit fosslight.org
Spec score 7.8 #12 of 28 in Open Source License Compliance Software

Spec sheet

Purpose
FOSSLight Hub manages open source, licenses, vulnerabilities, project BOMs, and open source compliance workflows.Read 7 Oct 2026 · fosslight.org
Intended users
Project distribution types include general software distribution, internal transfer, B2B, internal-only software, self-check, and open source contribution.Read 7 Oct 2026 · fosslight.org
Deployment
The maker documents Docker and Docker Compose installation, or a Java installation requiring Java 11 or higher, MariaDB 10.0 or higher or MySQL 5.6 or higher, and at least 8 GB memory.Read 7 Oct 2026 · fosslight.org
Security
The project Security tab tracks vulnerability findings from the project SBOM, with a configurable vulnerability score threshold and resolution status.Read 7 Oct 2026 · fosslight.org
Compliance
It supports an all-in-one compliance process, including generating open source notices, verifying disclosed source, and tracking issues.Read 7 Oct 2026 · github.com
License
The Hub is released under the AGPL-3.0 open source license.Read 7 Oct 2026 · fosslight.org
Access
The guide lists an LGE-only Hub and FOSSLight Enterprise, which requires a separate account; account inquiries go to [email protected].Read 7 Oct 2026 · fosslight.org
Automation
The documented REST API can query project vulnerability information as JSON and upload analyzed open source reports.Read 7 Oct 2026 · fosslight.org
Jira workflow
A project can designate a registered Hub user as the responsible person assigned to security-related Jira issues; the creator is assigned by default if none is designated.Read 7 Oct 2026 · fosslight.org
License management
It manages open source information, license restrictions, and vulnerabilities, with bulk registration for open source and licenses.Read 7 Oct 2026 · github.com
SBOM
It manages open source and proprietary software in SBOMs, supports SPDX, and can search projects by software.Read 7 Oct 2026 · github.com
Supply chain
It can manage third-party software and agreements as projects.Read 7 Oct 2026 · github.com
Vulnerability data caveat
The Security tab does not show vulnerability lists by ID for OSS entries without a version, because accurate vulnerability verification is difficult without that version.Read 7 Oct 2026 · fosslight.org

Plans and prices

FOSSLight Hub Free Released under AGPL-3.0; self-hosted installation is documented Read 7 Oct 2026 · fosslight.org

Every FOSSLight Hub plan and price →

Where Specifiction places it

Alternatives to FOSSLight HubAll alternatives →