🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase, the Google Summer of Code, Azure credits, nexB and others generous sponsors!

📦 🔥 Python project management. Manage packages: convert between formats, lock, install, resolve, isolate, test, build graph, show outdated, audit. Manage venvs, build package, bump version.

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

Recipes for the ConanCenter repository

Find unused, missing and transitive dependencies in a Python project.

Import Linter allows you to define and enforce rules for the internal and external imports within your Python project.

Identify unused dependencies and avoid a bloated virtual environment.

⭐ CLI tool for sorting dependents repo by stars

GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.yaml file

Continuous distribution of funding to your project contributors and dependencies. Integrated into GitHub Actions

A suite of utilities to help with software supply chain challenges on nix targets

A GitHub Action that Updates All GitHub Actions in a Repository and Creates a Pull Request with the Updates

The Security Dependency Orchestrator Service

Easy multi-field validation

Enhancement for pip uninstall command, that it removes all dependencies of an uninstalled package.

A very light weight dependency graph for systems with massive calculation complexities or scheduling systems

Check the health of your project's requirements and get a score for each dependency.

Show the inter-dependencies between modules of Python packages.

Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

Remove unnecessary includes from C/C++ source files