Hello, please note there are more open source tools out there, for example for component analysis:
* SW360 Antenna: https://github.com/eclipse/antenna * And the tools from the ACT Initiative: https://www.linuxfoundation.org/press-release/2019/12/the-linux-foundations-automated-compliance-work-garners-new-funding-advances-tools-development/ * it depends a little on for which technology you re trying to identify the components from. As for snippet scanning, I there're maybe open source attempts to tackle it, but could you describe maybe the use case that you have? It sounds like you would like to have one tool that does all the three things at once? (license scnaning, snippet scanning, SCA) Kind regards, Michael > On 21. Sep 2020, at 12:23, Anupam Ghosh <anupam.gh...@siemens.com> wrote: > > Hello Prasaath, > > Fossology is mainly design to scan licenses/copyrights information from your > package, > so, Fossology does not look into code-snippets or dependencies inside source > package. > > For code-snippet identification or dependency identification you have to use > a third party software. > > With regards, > Anupam > > From: fossology@lists.fossology.org <fossology@lists.fossology.org> On Behalf > Of Prasaath Ramasamy (prasaara) via lists.fossology.org > Sent: Monday, September 21, 2020 8:42 AM > To: fossol...@fossology.org; Mishra, Gaurav (CT RDA SSI ISF-IN) > <mishra.gau...@siemens.com> > Cc: Prasad Iyer (prasadiy) <prasa...@cisco.com>; Shiv Majji (smajji) > <sma...@cisco.com>; Ted Gauthier (tedg) <t...@cisco.com> > Subject: Re: [FOSSology] Fossology scan result > > Hello Fossology Team, > > Can you let me know if the component name identification is possible along > with the discovered license ? > > -Prasaath > > From: Prasaath Ramasamy (prasaara) > Sent: Wednesday, September 16, 2020 3:37 PM > To: fossol...@fossology.org > Cc: Prasad Iyer (prasadiy) <prasa...@cisco.com>; Shiv Majji (smajji) > <sma...@cisco.com>; Ted Gauthier (tedg) <t...@cisco.com> > Subject: Fossology scan result > > Hello team, > > I tried scanning a couple of Java source code and python source code and the > fossology tool was able to give me a list of all licenses (like Apache, MIT > etc..) but I am not able to find the corresponding component names (i.e. > activation, ant, apache-commons-logging etc…). Is there a way in the > fossology tool to get component names ? > > -Prasaath > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#3400): https://lists.fossology.org/g/fossology/message/3400 Mute This Topic: https://lists.fossology.org/mt/76884403/21656 Group Owner: fossology+ow...@lists.fossology.org Unsubscribe: https://lists.fossology.org/g/fossology/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
