Apache RAT vs OSSKB

Apache RAT is a free, open-source release-audit tool for checking software distributions, with particular attention to license headers. Version 0.18 provides a command-line client, an Ant task library, and a Maven plugin. You can include or exclude files using patterns, collections, pattern files, and file-size limits; apply approved-license lists; and produce plain, XML, missing-header, or unapproved-license reports. The Maven plugin can write target/rat.txt or add a report to a generated site. RAT can add Apache-2.0 headers and copyright notices to files allowed by configuration. XML license definitions are supported, and experienced users can extend matchers, formats, reports, and interfaces. It runs on Linux and is intended for self-hosted, on-premise use. Building requires Java 17, with Maven 3.9.13 or later recommended. Reports need interpretation and project-specific tuning, and heuristics can miss issues.

OSSKB identifies open source software in source code, including at the snippet level, to provide information relevant to license compliance. It matches source-code fingerprints against a database of fingerprints for known open source software. Results may include license names, copyright statements, quality indicators, and vulnerability information. The web service also offers API access, a Python scanner, and Audit Workbench downloads for macOS Intel, macOS M1/M2, and Linux; a compatible CLI or webhook can support automation. OSSKB is powered by the Open Source Software Knowledge Base, created and maintained by SCANOSS. It is free of charge on a best-effort basis, with no guarantee of availability or performance. The provider may limit the number or frequency of transactions to help maintain availability and performance. Fingerprint matching can produce false positives and false negatives, so results need human assessment. The terms say usage information may be logged to monitor load and improve the service, and that OSSKB is designed for professional use rather than end consumers. The listed plan is free.