OSCake

Spec sheet

Purpose

OSCake is an Xtext/Xtend-based engine that turns package collection descriptions and their compliance artifacts into an Open Source Compliance File for distribution with the package collection.Read 8 Oct 2026 · github.com

Support

The README lists GitHub issues and [email protected] as support and feedback channels.Read 8 Oct 2026 · github.com

License

The project is licensed under Eclipse Public License 2.0 and the README states the software is provided “AS IS” without warranties or conditions.Read 8 Oct 2026 · github.com

Artifact selection

The engine filters scan results to select artifacts needed in each license context and identifies missing information.Read 8 Oct 2026 · github.com

Collection language

Its OSCC domain-specific language describes data to gather across licenses.Read 8 Oct 2026 · github.com

Definition language

Its OSCF domain-specific language defines which data must accompany each component for compliant distribution.Read 8 Oct 2026 · github.com

Examples

The repository includes example test cases consisting of OSCC files created by ORT and ZIP files containing additional ORT gathered data.Read 5 Oct 2026 · github.com

Filtering and gaps

The OSCC generator derives OSCF from collected data by omitting unnecessary artifacts and marking what is missing for a valid OSCF.Read 5 Oct 2026 · github.com

Generation flow

OSCake interprets OSCC into OSCF, then evaluates OSCF and external data to produce an OSCF.md compliance file.Read 5 Oct 2026 · github.com

Inputs

OSCake is designed to use results gathered by ORT and compile a license adequate compliance file.Read 5 Oct 2026 · github.com

Integration

The README describes using ORT-gathered results as input to OSCake.Read 8 Oct 2026 · github.com

License aware output

The generated compliance file is intended to meet the requirements of the licenses involved in the package collection.Read 5 Oct 2026 · github.com

Limits

The setup instructions require configuring an absolute repository path for a data directory in the OSCF generator.Read 8 Oct 2026 · github.com

Output formats

OSCake derives an OSCF file from OSCC input and generates a Markdown compliance file from the OSCF file and external data.Read 8 Oct 2026 · github.com

Security policy

The repository contains a SECURITY.md security policy file.Read 5 Oct 2026 · github.com

Security reporting

The security policy asks reporters not to disclose vulnerabilities in public GitHub issues and directs privacy, security concept, and media questions to [email protected].Read 8 Oct 2026 · github.com

Setup

The documented setup uses Eclipse IDE for Java and DSL Developers, with Xtext and Xtend available through Eclipse Marketplace as an alternative installation route.Read 8 Oct 2026 · github.com

Technology

The project describes itself as based on Xtext and Xtend, with the DSLs defined and evaluated using those technologies.Read 5 Oct 2026 · github.com

Two DSLs

OSCake defines OSCC, a weak compliance artifact language for data to gather, and OSCF, a strict language for defining data needed per component.Read 5 Oct 2026 · github.com

Workflow

OSCake takes results gathered by ORT and compiles a license-appropriate compliance file.Read 8 Oct 2026 · github.com

Where Specifiction places it

• Open Source License Compliance Software#27 of 286.8