Tools
Every Skill, MCP server, CLI and plugin in the directory. Filter by type, profession or tag, or search by keyword.
Profession: Full-stack / Indie +2
Pick one or more: resources that suit any of them are listed.
Tags: compliance +1
Pick one or more: only resources carrying all of them are listed.
2 items

ScanCode Toolkit
CLIScans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
aboutcode-org/scancode-toolkit2.6k
OSS Review Toolkit (ORT)
CLIThe Linux Foundation's open-source compliance toolchain: analyzes project dependencies, scans licenses and copyrights, checks known vulnerabilities, flags policy violations and generates SBOMs and notice files. Needs Java 25 or Docker and ideally 8 GB RAM; have legal review license findings.
oss-review-toolkit/ort2.1k