Apache RAT vs REUSE Tool

Apache RAT is a free, open-source release-audit tool for checking software distributions, with particular attention to license headers. Version 0.18 provides a command-line client, an Ant task library, and a Maven plugin. You can include or exclude files using patterns, collections, pattern files, and file-size limits; apply approved-license lists; and produce plain, XML, missing-header, or unapproved-license reports. The Maven plugin can write target/rat.txt or add a report to a generated site. RAT can add Apache-2.0 headers and copyright notices to files allowed by configuration. XML license definitions are supported, and experienced users can extend matchers, formats, reports, and interfaces. It runs on Linux and is intended for self-hosted, on-premise use. Building requires Java 17, with Maven 3.9.13 or later recommended. Reports need interpretation and project-specific tuning, and heuristics can miss issues.

REUSE Tool helps software projects keep their own Free Software licensing information complete and machine-readable. Its command-line tools can download full license texts, add copyright and license details to file headers, and lint projects for problems. It can generate a software bill of materials with a command, while the REUSE API displays ongoing compliance status and can provide a badge and JSON output. Teams can run checks in CI/CD workflows such as Drone, Woodpecker CI, Forgejo Actions, GitHub Actions and Docker-based setups. A pre-commit hook can run linting at each Git commit and stop the commit if it reports an error. Installation options include Debian and Fedora packages, pipx, pip and source; Python 3.10 or newer is required. The tool is free, needs no registration and can be used offline. Its scope does not include checking whether a project complies with the licenses of its dependencies. The source code is GPL-3.0-or-later, documentation is CC-BY-SA-4.0, and some configuration and data files are CC0-1.0.