Description

FossID is a software composition analysis tool designed for security professionals. It enables users to scan source code for open source licenses and vulnerabilities, mitigate potential risks and security vulnerabilities, alter files voluntarily or automatically (by QA tools or development scripts), perform open-source scans without involving any external dependencies or network traffic outside of the network, as well as list and analyze detected 3rd party open source components, files, and copy-pasted code snippets. Features include vulnerability detection, error reporting capability, scanning engine, fingerprint collection, and digital signature.