Skip to content
SPECIFICTION
Get listed

Check License Compliance vs FOSSology

Check License Compliance

github.com

FOSSology

fossology.org

Side by side

FigureCheck License ComplianceFOSSology
Price fromFreeFree
Free planYesYes
Free trial——
Open source—Yes
Web—Yes
Windows—Yes
macOS—Yes
LinuxYesYes
API—Yes
Self-hostedYesYes
Plans published12
Spec score · Open Source License Compliance Software8.0 (#9)8.8 (#2)
DeploymentThe GitHub Action runs using a Docker image defined by the repository's Dockerfile.The project describes installation using Docker, Vagrant with VirtualBox, or source installation.
PurposeChecks repository dependencies against allowed, forbidden, and warning license policies.FOSSology is an open-source license-compliance system and toolkit for scanning software for license, copyright, and export-control information.
ReportsResults can be reported as text, Markdown, or JSON, including details about noncompliant dependencies, their installation paths, and licenses.FOSSology can generate SPDX 2.0 exports, Debian copyright files, hierarchical file lists with license identifiers, and Readme files containing identified license texts and copyright information.

Plans

Check License Compliance

  • Check License ComplianceFree

Check License Compliance pricing →

FOSSology

  • FOSSologyFree
  • FOSSology open-source softwareFree

FOSSology pricing →

In their own words

Check License Compliance

Check License Compliance has no write-up on Specifiction yet; its figures are above.

Visit github.com

FOSSology

FOSSology is an open-source system for examining software for license, copyright, and export-control information. Upload individual files or packages, then unpack and scan them with selected agents. Nomos looks for license indicators through phrases, regular expressions, and heuristics; Monk checks text against stored license texts or phrases supplied by users. Its web interface supports review of findings, license-text management, bulk recognition, aggregated file views, and reusing reviews for files with matching hashes. It can identify copyright statements and presents keyword-based findings that users can review for possible export-control relevance. Reports include SPDX 2.0 exports, Debian copyright files, hierarchical file lists with license identifiers, and Readme files with identified license and copyright details. A REST API supports CI/CD use, uploads, and scan triggers from other applications; the command line can retrieve SPDX files. Deployment options include Docker, Vagrant with VirtualBox, or source installation. It is free, with on-premise deployment options. One stated limit: it cannot determine which libraries produced a binary; binary analysis tools are needed for that task.

Visit fossology.org