{"adoption": {"forks": 134, "observed_at": "2026-08-28T04:03:41.042226+00:00", "stars": 1125}, "canonical_url": "https://ross.abutalabs.com/products/opensca-cli", "card": {"archived": false, "artifact_type": "cli-tool", "description": "OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community. ", "domain": ["security", "developer-tools", "legal"], "enriched": true, "function": ["security", "vulnerability-scanning", "dependency-audit", "parser", "cli", "developer-tools"], "health_score": 88, "homepage": "https://opensca.xmirror.cn", "language": "Go", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["XmirrorSecurity/OpenSCA-cli"], "name": "XmirrorSecurity/OpenSCA-cli", "platform": ["windows", "cli", "cross-platform"], "pushed_at": "2026-05-15T11:52:02+00:00", "repo": "XmirrorSecurity/OpenSCA-cli", "stars": 1125, "tags": ["sca", "sbom", "software-composition-analysis", "supply-chain-security", "license-compliance", "cyclonedx", "spdx", "devsecops", "vulnerability-detection", "dependency-scanning", "devops", "open-source", "linux", "macos", "docker"], "topics": ["sca", "devsecops", "security", "sbom", "software-bill-of-materials", "software-composition-analysis", "software-supply-chain", "software-supply-chain-security", "license-compliance", "cyclonedx", "spdx", "swid"], "urls": [], "use_cases": ["scan project dependencies for known vulnerabilities", "generate an SBOM for my repository", "check open-source license compliance of dependencies", "detect transitive dependencies in go.mod or package-lock.json", "integrate SCA scanning into CI/CD pipeline", "audit third-party components for supply chain risks", "find which dependency versions fix a CVE like log4shell"], "what_it_is": "OpenSCA-cli is an open-source Software Composition Analysis (SCA) command-line tool that scans projects to detect third-party open-source dependencies, known vulnerabilities, and license compliance risks. It generates SBOM reports in standards like SPDX, CycloneDX, and SWID, supports many language ecosystems (Java, JavaScript, Go, Python, Rust, etc.), and integrates via CLI, IDE plugins, and CI/CD pipelines.", "when_to_avoid": ["you need commercial-grade support, private component repository analysis, or enterprise policy management", "you need dynamic analysis or SAST/DAST rather than dependency composition analysis", "your ecosystem is not among the supported package managers"], "when_to_choose": ["you need a free, open-source SCA tool with multi-language dependency parsing", "you want SBOM generation in SPDX/CycloneDX/SWID formats", "you need offline or self-hosted vulnerability scanning with configurable vulnerability databases", "you want lightweight CLI/IDE/CI integration for supply chain security"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/opensca-cli", "repo": "XmirrorSecurity/OpenSCA-cli", "role": "main", "score": 82}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:41.042226+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:39:22.601786+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7bdb46c9f03c469d6dd4e36024bbe6790ae4001631e1a2fdae6890d5d6dc3c1b", "fetched_at": "2026-08-28T04:03:41.042226+00:00", "kind": "readme", "missing": false, "url": "https://github.com/XmirrorSecurity/OpenSCA-cli"}, {"content_hash": "3ec963c5cd719d5b13ff77e7bdd793641092f1d9f624bdda10e4cc42bfc07c20", "fetched_at": "2026-08-29T12:43:58.055219+00:00", "kind": "homepage", "missing": false, "url": "https://opensca.xmirror.cn"}, {"content_hash": "985107bba98c542dd528e9097afb19ffe4d68f1f9c5e51eb58953f575666a099", "fetched_at": "2026-08-29T12:43:58.086524+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/docs/v1"}, {"content_hash": "723b15008c88697dd9b91dcc0e9dce1ce04294d7760e1c5c2a24f65c4ae6d06b", "fetched_at": "2026-08-29T12:43:58.088815+00:00", "kind": "site_page", "missing": false, "url": "https://opensca.xmirror.cn/about"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 82, "longevity": 100, "rhythm": 72}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1707, "days_push": 110, "days_rel": 110, "gap_med": 64, "n_releases_24m": 6}, "score": 82, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}