Open-source legal software
80 open-source libraries, tools and applications tagged legal, ranked by how closely legal is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
80 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Lynis Lynis is an open-source security auditing and hardening tool for UNIX-based systems including Linux, macOS, and BSD. It performs in-depth l… | 83 | 16450 | stable |
| Prowler Prowler is an open-source cloud security platform that performs security best-practice assessments, audits, continuous monitoring, hardenin… | 93 | 14863 | active |
| handsomestWei/patent-disclosure-skill A Python-based agent skill for Chinese patent work that mines patentable points from project materials, drafts disclosure documents (invent… | 60 | 11694 | active |
| anthropics/claude-for-legal A suite of Claude plugins, skills, and MCP connectors from Anthropic for legal workflows across practice areas like commercial, privacy, li… | 58 | 9611 | active |
| immudb immudb is an open-source immutable database written in Go that stores data in SQL, key-value, or document models while guaranteeing tamper-… | 92 | 9042 | stable |
| OpenSignLabs/OpenSign OpenSign is a free, open-source document e-signing application and DocuSign alternative built with React, Node.js, and MongoDB. It supports… | 88 | 7023 | active |
| Fokkyp/SoftwareCopyright-Skill A coding-agent Skill that reads a local project and automatically generates a complete set of Chinese software copyright (软著) application m… | 82 | 5944 | active |
| ossec/ossec-hids OSSEC is an open-source host-based intrusion detection system (HIDS) that combines log analysis, file integrity monitoring, rootkit detecti… | 94 | 5062 | stable |
| nisrulz/app-privacy-policy-generator A free, open-source web app that generates customized Privacy Policy and Terms & Conditions documents for Android, iOS, KaiOS, and Web apps… | 91 | 4687 | active |
| CISO Assistant CISO Assistant is an open-source, self-hostable GRC (Governance, Risk, and Compliance) platform covering risk management, compliance and au… | 91 | 4521 | active |
| Mike Mike is an open-source, self-hostable legal AI platform combining a Next.js frontend and Express backend for document review, drafting, and… | 77 | 4308 | active |
| osano/cookieconsent A lightweight, free JavaScript plugin that displays cookie consent banners to help websites comply with the EU Cookie Law, GDPR, and CCPA. … | 63 | 3576 | stable |
| 0x6d69636b/windows_hardening HardeningKitty is a PowerShell module that audits and hardens Windows systems against security baselines such as CIS Benchmarks, Microsoft … | 81 | 2665 | active |
| kordoc An MCP server and CLI that exposes Korea's Ministry of Government Legislation (법제처) open APIs — statutes, precedents, ordinances, treaties,… | 83 | 2653 | active |
| ScanCode ScanCode Toolkit is a command-line tool and Python library that scans codebases to detect licenses, copyrights, package manifests, dependen… | 91 | 2635 | active |
| mono0926/LicensePlist LicensePlist is a Swift command-line tool that automatically generates a Plist of license notices for all dependencies of an iOS applicatio… | 95 | 2534 | active |
| RanKKI/LawRefBook LawRefBook is an open-source handbook of the laws of the People's Republic of China, built in Swift and available on iOS, macOS, and the we… | 45 | 2453 | active |
| ballerine-io/ballerine Ballerine is an open-source infrastructure and data orchestration platform for identity verification (KYC/KYB), fraud prevention, and merch… | 74 | 2439 | active |
| LogicLabs-OU/OpenArchiver OpenArchiver is an open-source, self-hosted platform for legally compliant email archiving and eDiscovery. It ingests email from Google Wor… | 87 | 2422 | active |
| CatalaLang/catala Catala is a domain-specific programming language for deriving faithful-by-construction algorithms from legislative texts via literate progr… | 94 | 2417 | active |
| romainsimon/paperasse Paperasse is a collection of Markdown-based AI agent skills specialized in French bureaucracy: accounting (PCG, TVA, liasse fiscale), invoi… | 56 | 2410 | active |
| oss-review-toolkit/ort The OSS Review Toolkit (ORT) is a FOSS policy automation toolkit that analyzes project dependencies, scans licenses and copyrights, checks … | 94 | 2098 | active |
| trycompai/comp Comp AI is an open-source, AI-native compliance platform that automates evidence collection, policy generation, and continuous monitoring f… | 80 | 2013 | active |
| shcherbak-ai/contextgem ContextGem is an open-source Python LLM framework for extracting structured data and insights from documents with minimal code. It provides… | 90 | 2009 | active |
| cisagov/cset CSET is a free desktop application from CISA and Idaho National Laboratory that guides organizations through step-by-step cybersecurity ass… | 88 | 1909 | active |
| OpenSCAP OpenSCAP is a NIST-certified open-source toolkit providing both a C library and the 'oscap' command-line tool for parsing, validating, edit… | 83 | 1822 | stable |
| zubair-trabzada/ai-legal-claude A Claude Code skill pack providing an AI legal assistant with 14 slash commands and 5 parallel agents for contract review, risk analysis, N… | 45 | 1768 | active |
| pgaudit/pgaudit pgAudit is a PostgreSQL extension written in C that provides detailed session and object audit logging through the standard PostgreSQL logg… | 74 | 1709 | stable |
| pengxiao-song/LaWGPT LaWGPT is a series of open-source large language models tuned with Chinese legal knowledge, built on Chinese-LLaMA/ChatGLM base models with… | 30 | 6061 | maintenance |
| cla-assistant/cla-assistant CLA assistant is a web service and self-hostable application that automates Contributor License Agreement handling for GitHub repositories.… | 23 | 1544 | stable |
| FOSSA CLI FOSSA CLI is a zero-configuration, language-agnostic dependency analysis tool that detects dependencies in any codebase across 20+ build sy… | 96 | 1525 | active |
| spatie/laravel-cookie-consent A Laravel package by Spatie that adds a simple, customizable cookie consent banner to help sites comply with the EU cookie law. It displays… | 74 | 1495 | active |
| getprobo/probo Probo is an open-source, self-hostable governance, risk, and compliance (GRC) platform for engineering and security teams, covering risk ma… | 84 | 1460 | active |
| atm A Rust command line tool for generating and working with MIDI files, built to brute-force generate all mathematically possible melodies. It… | 66 | 1413 | active |
| lvwzhen/law-cn-ai An AI legal assistant for Chinese law that answers questions using a knowledge base of Chinese legal documents. It is a Next.js app that em… | 30 | 4915 | maintenance |
| 123xiao/sex-agreement-app A Next.js web application for creating, digitally signing, and managing sexual consent agreements, with PDF export and multi-step form guid… | 30 | 1195 | active |
| maester365/maester Maester is a PowerShell-based test automation framework that monitors and validates the security configuration of Microsoft 365 and Entra I… | 90 | 1151 | active |
| XmirrorSecurity/OpenSCA-cli OpenSCA-cli is an open-source Software Composition Analysis (SCA) command-line tool that scans projects to detect third-party open-source d… | 76 | 1134 | active |
| cncases/cases A self-hosted Rust application for locally searching over 85 million Chinese court judgment documents from the China Judgments Online websi… | 84 | 1131 | active |
| Yargı Legal Data Access A FastMCP-based Model Context Protocol server that provides access to Turkish legal databases, including Yargıtay, Danıştay, Anayasa Mahkem… | 79 | 1112 | active |
| ovh/debian-cis A set of modular shell scripts that audit and harden Debian 11/12/13 systems according to CIS security benchmarks, used in production at OV… | 73 | 1069 | active |
| jonrau1/ElectricEye ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for asset management, security posture management, and attack surface monitoring. … | 58 | 1049 | active |
| fossology/fossology FOSSology is an open source license compliance system and toolkit that scans software for licenses, copyrights, and export control data. It… | 90 | 1035 | active |
| google/go-licenses A Go CLI tool that analyzes a Go package's dependency tree and reports the licenses of all libraries used, with versioned URLs to each lice… | 71 | 1018 | active |
| Project-DARC/DARC DARC is a company virtual machine that deploys to EVM-compatible blockchains, featuring multi-level tokens, dividend mechanisms, and a plug… | 31 | 9154 | experimental |
| pivotal/LicenseFinder LicenseFinder is a Ruby CLI tool that scans a project's dependencies via its package manager, detects each package's license, and compares … | 23 | 1797 | maintenance |
| davglass/license-checker A Node.js CLI tool that inspects an npm project's dependency tree and reports the license of every installed package. It supports JSON/CSV … | 32 | 1679 | maintenance |
| liuhuanyong/CrimeKgAssitant A Chinese legal intelligence application built around a crime knowledge graph covering 856 crime types. It provides crime type prediction f… | 32 | 1589 | maintenance |
| strongdm/comply Comply is an open-source SOC2-focused compliance automation CLI written in Go. It generates auditor-friendly policy documents from Markdown… | 23 | 1584 | maintenance |
| mnemox-ai/tradememory-protocol TradeMemory Protocol is an MCP server providing persistent memory and a tamper-evident decision audit trail for AI trading agents, with out… | 79 | 1421 | maintenance |
| tmobile/pacbot PacBot is a platform for continuous compliance monitoring, compliance reporting, and security automation for the cloud, where security and … | 23 | 1312 | maintenance |
| square/sudo_pair A sudo IO-plugin written in Rust that requires a second live human to approve and monitor privileged sudo sessions. It enforces dual-contro… | 32 | 1272 | maintenance |
| developers-against-repressions/case-212 An open letter from IT industry professionals demanding an end to political persecution of the defendants of the 'Moscow case' in Russia. P… | 32 | 1270 | maintenance |
| LiuHC0428/LAW-GPT A Chinese-language legal conversational model (LawGPT_zh / 獬豸) fine-tuned from ChatGLM-6B with LoRA on legal Q&A datasets, including answer… | 31 | 1194 | maintenance |
| licensee/licensed Licensed is a Ruby gem and CLI tool that caches the licenses of a project's dependencies and verifies their status against configured rules… | 87 | 1047 | maintenance |
| CSHaitao/LexiLaw LexiLaw is a fine-tuned Chinese legal large language model based on ChatGLM-6B, providing legal consultation and Q&A capabilities. It inclu… | 58 | 1046 | maintenance |
| ffii/FFII.org The source for the FFII.org website of the Foundation for a Free Information Infrastructure, a European advocacy group focused on software … | 32 | 1000 | maintenance |
| Klotzkette/claude-fuer-deutsches-recht An experimental collection of Claude skills, sub-agents, and workflows adapted for German legal practice, covering areas like employment, c… | 78 | 1719 | experimental |
| DocuSeal DocuSeal is an open-source, self-hostable web application for creating, filling, and electronically signing PDF documents, positioned as a … | 91 | 18697 | active |
| Wazuh Wazuh is a free, open source security platform that unifies XDR and SIEM capabilities for threat prevention, detection, and response across… | 98 | 17197 | stable |
| documenso/documenso Documenso is an open-source, self-hostable alternative to DocuSign for digitally signing documents, built with Next.js, TypeScript, and Pos… | 99 | 15463 | active |
| AidLux (AidLearning) AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 63 | 5812 | active |
| CookieConsent CookieConsent is a lightweight, GDPR and CCPA compliant cookie consent management plugin written in vanilla JavaScript with no dependencies… | 62 | 5683 | active |
| mikepenz/AboutLibraries AboutLibraries is a Kotlin Multiplatform library and Gradle plugin that automatically collects all dependencies and their licenses of a Gra… | 100 | 4470 | active |
| aquasecurity/cloudsploit CloudSploit by Aqua is an open-source Cloud Security Posture Management (CSPM) tool that scans cloud infrastructure accounts for misconfigu… | 66 | 3777 | active |
| Bearer/bearer Bearer CLI is an open-source static application security testing (SAST) tool written in Go that scans source code and analyzes data flows t… | 92 | 2758 | active |
| tractorjuice/arc-kit ArcKit is an AI governance harness and plugin toolkit for enterprise architects that works with AI coding assistants like Claude Code, Gemi… | 79 | 2252 | active |
| c15t/c15t c15t is an open-source, developer-first consent management platform (CMP) for cookie banners, privacy preferences, consent storage, and con… | 85 | 1989 | active |
| valqore/valqore Valqore is a deterministic infrastructure governance engine that scans Kubernetes manifests, Terraform, Helm, and cloud resources against 1… | 77 | 1900 | active |
| globaleaks/globaleaks-whistleblowing-software GlobaLeaks is a free, open-source whistleblowing platform that lets any organization set up and maintain a secure, anonymous reporting syst… | 91 | 1521 | stable |
| Open-Source-Legal/OpenContracts OpenContracts is a self-hosted, MIT-licensed document intelligence platform that turns document repositories into a programmable citation g… | 90 | 1508 | active |
| securitybunker/databunker Databunker is a self-hosted, Go-based secure vault for tokenizing and storing personal records such as PII, PHI, KYC, and PCI data. It expo… | 71 | 1487 | active |
| aws-cloudformation/cloudformation-guard AWS CloudFormation Guard (cfn-guard) is a general-purpose policy-as-code evaluation tool with an expressive DSL for defining rules. It vali… | 83 | 1389 | active |
| stenolabs/stenoai Steno is a privacy-first desktop AI notepad and meeting notetaker that records, transcribes, summarizes, and lets you query meetings entire… | 85 | 1338 | active |
| Ricky-7-Yan/intelligent-audit-system AuditPilot is an enterprise AI agent workbench for audit delivery, combining evidence-grounded agentic RAG, governed tool execution, evalua… | 57 | 1171 | active |
| TongchengOpenSource/AppScan AppScan is a free, enterprise-grade automated privacy compliance detection tool for Android apps, based on dynamic analysis. It identifies … | 23 | 1132 | active |
| AmauriC/tarteaucitron.js tarteaucitron.js is an open-source, accessible GDPR consent management platform (CMP) that displays a cookie banner and per-service consent… | 97 | 1058 | stable |
| DSS (Digital Signature Service) DSS (Digital Signature Service) is an open-source Java library from the European Commission for creating, extending, and validating advance… | 89 | 1040 | stable |
| microsoft/agent-governance-toolkit A Microsoft open-source toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for au… | 76 | 6444 | experimental |
| Chatbot_CN Chatbot_CN is a Chinese multi-turn, task-oriented chatbot platform targeting the finance and legal domains (with chitchat support), combini… | 32 | 1291 | maintenance |
page 1 / 1