FOSSLight Hub vs OSSKB
FOSSLight Hub
fosslight.orgOSSKB
softwaretransparency.orgSide by side
| Figure | FOSSLight Hub | OSSKB |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · Open Source License Compliance Software | 7.8 (#12) | 7.6 (#17) |
| Automation | The documented REST API can query project vulnerability information as JSON and upload analyzed open source reports. | The maker says users can get a compatible CLI or webhook for automation. |
| Intended users | Project distribution types include general software distribution, internal transfer, B2B, internal-only software, self-check, and open source contribution. | The terms say OSSKB is designed for professional use and is not offered for end-consumer use. |
| Purpose | FOSSLight Hub manages open source, licenses, vulnerabilities, project BOMs, and open source compliance workflows. | OSSKB identifies open source software, including at snippet level, and provides information for license compliance. |
Plans
In their own words
FOSSLight Hub
FOSSLight Hub has no write-up on Specifiction yet; its figures are above.
OSSKB
OSSKB identifies open source software in source code, including at the snippet level, to provide information relevant to license compliance. It matches source-code fingerprints against a database of fingerprints for known open source software. Results may include license names, copyright statements, quality indicators, and vulnerability information. The web service also offers API access, a Python scanner, and Audit Workbench downloads for macOS Intel, macOS M1/M2, and Linux; a compatible CLI or webhook can support automation. OSSKB is powered by the Open Source Software Knowledge Base, created and maintained by SCANOSS. It is free of charge on a best-effort basis, with no guarantee of availability or performance. The provider may limit the number or frequency of transactions to help maintain availability and performance. Fingerprint matching can produce false positives and false negatives, so results need human assessment. The terms say usage information may be logged to monitor load and improve the service, and that OSSKB is designed for professional use rather than end consumers. The listed plan is free.