Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 4 Oct 2026

OSS Review Toolkit

Ch 405.9of 65 Software Composition Analysis Software
  1. 1Runs onLinux, Mac, self-hosted, Windows
  2. 2CostsFree plan
  3. 3Supported ecosystemsBazel, Conan, Pub, Mix, Rebar3, Gleam, Go Modules, Stack, Gradle, Maven, Tycho, Bower, Bun, NPM, PNPM, Yarn, .NET, NuGet, Carthage, CocoaPods, Swift Package Manager, Composer, PIP, Pipenv, Poetry, Bundler, Cargo, SBT, SPDX, ORT Project, Unmanaged
  4. 4SBOM generationYes
  5. 5Deployment optionsself hosted
5 lines stated Written from the maker's own pages: oss-review-toolkit.org
Visit site Alternatives
The OSS Review Toolkit homepage

Overview

OSS Review Toolkit is ranked #40 of 65 in software composition analysis software on Specifiction. It runs on Linux, macOS, Self-hosted, Windows. There is a free plan.

OSS Review Toolkit plans and pricing

All plans
OSS Review Toolkit Free Open-source toolkit; no paid limits stated oss-review-toolkit.org · 4 Oct 2026

Compared on software composition analysis software

Supported ecosystems
Bazel, Conan, Pub, Mix, Rebar3, Gleam, Go Modules, Stack, Gradle, Maven, Tycho, Bower, Bun, NPM, PNPM, Yarn, .NET, NuGet, Carthage, CocoaPods, Swift Package Manager, Composer, PIP, Pipenv, Poetry, Bundler, Cargo, SBT, SPDX, ORT Project, Unmanagedoss-review-toolkit.org
SBOM generation
Yesoss-review-toolkit.org
Deployment options
self_hostedoss-review-toolkit.org

Facts

Purpose
ORT is a FOSS policy automation toolkit for managing software dependencies.oss-review-toolkit.org · 4 Oct 2026
SBOMs and attribution
It can generate CycloneDX and SPDX SBOMs, as well as custom FOSS attribution documentation.oss-review-toolkit.org · 4 Oct 2026
Policy checks
Its risk-based policy-as-code checks cover licensing, security vulnerabilities, InnerSource, and engineering standards.oss-review-toolkit.org · 4 Oct 2026
Pipeline tools
The toolkit includes tools to analyze dependencies, download source code, scan for license and copyright findings, retrieve security advisories, evaluate policies, report results, and send notifications.oss-review-toolkit.org · 4 Oct 2026
Usage and CI
ORT can be used as a library, through its command-line interface, or via CI integrations.oss-review-toolkit.org · 4 Oct 2026
Package ecosystem coverage
The analyzer supports package managers including Gradle, Maven, NPM, PNPM, Yarn, Cargo, Composer, PIP, Poetry, and NuGet.oss-review-toolkit.org · 4 Oct 2026
Vulnerability data integrations
The advisor can retrieve vulnerability information from configured providers including OSV, VulnerableCode, OSS Index, and Black Duck.oss-review-toolkit.org · 4 Oct 2026
Report formats
Reporters can produce outputs including CycloneDX BOMs, SPDX documents, static HTML, Web App reports, and NOTICE files.oss-review-toolkit.org · 4 Oct 2026
Installation
ORT is available as Docker images, a binary distribution from GitHub releases, or a build from source.oss-review-toolkit.org · 4 Oct 2026
Container image sizes
For release 13.0.0, the full Docker image is approximately 7 GB and the minimal image approximately 3 GB.oss-review-toolkit.org · 4 Oct 2026
Supported operating systems
The project says ORT is continuously used by its core development team on Linux, Windows, and macOS, which it considers well supported.oss-review-toolkit.org · 4 Oct 2026
Security configuration caveat
The PIP analyzer can execute setup.py files to resolve dependencies when configured to do so, and the documentation flags this as a potential security risk.oss-review-toolkit.org · 4 Oct 2026
Community support
The project links to a community Slack and provides the team contact [email protected].oss-review-toolkit.org · 4 Oct 2026

Best OSS Review Toolkit alternatives

See all 20
All accessCh 01 Sonatype Nexus Repository Free planFree trialAPI from $162.50/mo8.0 All accessCh 02 Xygeni Free planFree trialAPI Free to start7.8 All accessCh 03 Snyk Open Source Free planAPILinux from $25/mo7.6 All accessCh 04 Socket Free planAPIBrowser from $25/mo7.5 All accessCh 05 Docker Desktop Free planLinuxMac from $9/mo7.4 All accessCh 06 FOSSA Free planFree trialAPI from $168392.50/mo7.4

Where it ranks on Specifiction

Is OSS Review Toolkit yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OSS Review Toolkit

Sources