OSSKB
softwaretransparency.org
What it is
OSSKB identifies open source software in source code, including at the snippet level, to provide information relevant to license compliance. It matches source-code fingerprints against a database of fingerprints for known open source software. Results may include license names, copyright statements, quality indicators, and vulnerability information. The web service also offers API access, a Python scanner, and Audit Workbench downloads for macOS Intel, macOS M1/M2, and Linux; a compatible CLI or webhook can support automation. OSSKB is powered by the Open Source Software Knowledge Base, created and maintained by SCANOSS. It is free of charge on a best-effort basis, with no guarantee of availability or performance. The provider may limit the number or frequency of transactions to help maintain availability and performance. Fingerprint matching can produce false positives and false negatives, so results need human assessment. The terms say usage information may be logged to monitor load and improve the service, and that OSSKB is designed for professional use rather than end consumers. The listed plan is free.
Spec sheet
- Purpose
- OSSKB identifies open source software, including at snippet level, and provides information for license compliance.Read 4 Oct 2026 · softwaretransparency.org
- Intended users
- The terms say OSSKB is designed for professional use and is not offered for end-consumer use.Read 4 Oct 2026 · softwaretransparency.org
- Privacy
- The maker describes OSSKB as privacy-friendly; its terms say it may log usage information to monitor service load and improve the service.Read 4 Oct 2026 · softwaretransparency.org
- Headquarters
- Madrid, SpainRead 28 Sep 2026 · softwaretransparency.org
- Automation
- The maker says users can get a compatible CLI or webhook for automation.Read 4 Oct 2026 · softwaretransparency.org
- Availability
- The service is provided free of charge on a best-effort basis, without a guarantee of availability or performance.Read 4 Oct 2026 · softwaretransparency.org
- Clients
- The maker lists a Python scanner and Audit Workbench downloads for macOS Intel, macOS M1/M2, and Linux.Read 4 Oct 2026 · softwaretransparency.org
- Fingerprint matching
- The service compares source code fingerprints against a database of known open source software fingerprints.Read 4 Oct 2026 · softwaretransparency.org
- Knowledge base
- OSSKB is powered by the Open Source Software Knowledge Base, created and maintained by SCANOSS.Read 4 Oct 2026 · softwaretransparency.org
- Metadata
- Identifications may include license names, copyright statements, quality indicators, and vulnerabilities.Read 4 Oct 2026 · softwaretransparency.org
- Result caveat
- The maker says fingerprint matching can produce false positives and false negatives, so results require further human assessment.Read 4 Oct 2026 · softwaretransparency.org
- Support contact
- The maker lists [email protected] as its contact email.Read 4 Oct 2026 · softwaretransparency.org
- Usage limits
- The provider may limit the number or frequency of transactions per user to help ensure availability and performance.Read 4 Oct 2026 · softwaretransparency.org
Plans and prices
Strong points and limits
Strong points
- Identifies software down to source-code snippets
- Results may include licenses and copyright statements
- Python scanner and Audit Workbench downloads
- CLI or webhook options for automation
- Free of charge
Limits
- Best-effort service without availability or performance guarantees
- Transaction number or frequency may be limited
- Fingerprint matches can be false positives or negatives
- Usage information may be logged
Who it suits
OSSKB is designed for professional users who need to identify open source components in source code and review information relevant to license compliance. It is not offered for end-consumer use, and its matches require further human assessment.
Verdict
OSSKB offers free fingerprint-based identification and several client options for professional workflows. Its best-effort availability and the possibility of false matches make human review important.
Where Specifiction places it
- Open Source License Compliance Software#17 of 287.6