Apache RAT vs OSCake
Apache RAT
creadur.apache.orgOSCake
github.comSide by side
| Figure | Apache RAT | OSCake |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Linux | Yes | — |
| Self-hosted | Yes | — |
| Plans published | 1 | 0 |
| Spec score · Open Source License Compliance Software | 8.5 (#3) | 6.8 (#27) |
| License | Apache Creadur licenses its software to the public under the Apache License, Version 2.0. | The project is licensed under Eclipse Public License 2.0 and the README states the software is provided “AS IS” without warranties or conditions. |
| Output formats | The package includes stylesheets for missing-header reports, unapproved-license reports, plain output, and pretty-printed XML. | OSCake derives an OSCF file from OSCC input and generates a Markdown compliance file from the OSCF file and external data. |
| Purpose | Apache RAT audits software distributions, with a focus on license headers. | OSCake is an Xtext/Xtend-based engine that turns package collection descriptions and their compliance artifacts into an Open Source Compliance File for distribution with the package collection. |
| Security reporting | The Apache Security Team asks that potential vulnerabilities be reported first to a private Apache security mailing list. | The security policy asks reporters not to disclose vulnerabilities in public GitHub issues and directs privacy, security concept, and media questions to [email protected]. |
| Support | The project invites users to contribute patches, report bugs, and talk to the community. | The README lists GitHub issues and [email protected] as support and feedback channels. |
Plans
In their own words
Apache RAT
Apache RAT is a free, open-source release-audit tool for checking software distributions, with particular attention to license headers. Version 0.18 provides a command-line client, an Ant task library, and a Maven plugin. You can include or exclude files using patterns, collections, pattern files, and file-size limits; apply approved-license lists; and produce plain, XML, missing-header, or unapproved-license reports. The Maven plugin can write target/rat.txt or add a report to a generated site. RAT can add Apache-2.0 headers and copyright notices to files allowed by configuration. XML license definitions are supported, and experienced users can extend matchers, formats, reports, and interfaces. It runs on Linux and is intended for self-hosted, on-premise use. Building requires Java 17, with Maven 3.9.13 or later recommended. Reports need interpretation and project-specific tuning, and heuristics can miss issues.