================
ScanCode toolkit
================
A typical software project often reuses hundreds of third-party packages.
License and packages, dependencies and origin information is not always easy to
find and not normalized: ScanCode discovers and normalizes this data for you.
Read more about ScanCode here: https://scancode-toolkit.readthedocs.io/.
Check out the code at https://github.com/nexB/scancode-toolkit
Discover also:
- The ScanCode.io server project here: https://scancodeio.readthedocs.io
- The ScanCode Workbench project for visualization of scancode results data:
https://github.com/nexB/scancode-workbench
- Other companion SCA projects for code origin, license and security analysis
here: https://aboutcode.org
Build and tests status
======================
We run 30,000+ tests on each commit on multiple CIs to ensure a good platform
compabitility with multiple versions of Windows, Linux and macOS.
+------------+--------------+-------------------------+----------------------------+
| **Azure** | **RTD Build**| **GitHub actions Docs** | **GitHub actions Release** |
+============+==============+=========================+============================+
| |azure| | |docs-rtd| | |docs-github-actions| | |release-github-actions| |
+------------+--------------+-------------------------+----------------------------+
Why use ScanCode?
=================
- As a **standalone command-line tool**, ScanCode is **easy to install**, run,
and embed in your CI/CD processing pipeline.
It runs on **Windows, macOS, and Linux**.
- ScanCode is **used by several projects and organizations** such as
the `Eclipse Foundation <https://www.eclipse.org>`_,
`OpenEmbedded.org <https://www.openembedded.org>`_,
the `FSFE <https://www.fsfe.org>`_,
the `FSF <https://www.fsf.org>`_,
`OSS Review Toolkit <http://oss-review-toolkit.org>`_,
`ClearlyDefined.io <https://clearlydefined.io/>`_,
`RedHat Fabric8 analytics <https://github.com/fabric8-analytics>`_,
and many more.
- ScanCode detects licenses, copyrights, package manifests, direct dependencies,
and more both in **source code** and **binary** files and is considered as the
best-in-class and reference tool in this domain, re-used as the core tools for
software composition data collection by several open source tools.
- ScanCode provides the **most accurate license detection engine** and does a
full comparison (also known as diff or red line comparison) between a database
of license texts and your code instead of relying only on approximate regex
patterns or probabilistic search, edit distance or machine learning.
- Written in Python, ScanCode is **easy to extend with plugins** to contribute
new and improved scanners, data summarization, package manifest parsers, and
new outputs.
- You can save your scan results as **JSON, YAML, HTML, CycloneDX or SPDX** or
even create your own format with Jinja templates.
- You can also organize and run ScanCode server-side with the
companion `ScanCode.io web app <https://github.com/nexB/scancode.io>`_
to organize and store multiple scan projects including scripted scanning pipelines.
- ScanCode output data can be easily visualized and analysed using the
`ScanCode Workbench <https://github.com/nexB/scancode-workbench>`_ desktop app.
- ScanCode is **actively maintained**, has a **growing users and contributors
community**.
- ScanCode is heavily **tested** with an automated test suite of over **20,000 tests**.
- ScanCode has an extensive and growing documentation.
- ScanCode can process packages, build manifest and lockfile formats to collect
Package URLs and extract metadata: Alpine packages, BUCK files, ABOUT files,
Android apps, Autotools, Bazel, JavaScript Bower, Java Axis, MS Cab,
Rust Cargo, Cocoapods, Chef Chrome apps, PHP Composer and composer.lock,
Conda, CPAN, Debian, Apple dmg, Java EAR, WAR, JAR, FreeBSD packages,
Rubygems gemspec, Gemfile and Gemfile.lock, Go modules, Haxe packages,
InstallShield installers, iOS apps, ISO images, Apache IVY, JBoss Sar,
R CRAN, Apache Maven, Meteor, Mozilla extensions, MSI installers,
JavaScript npm packages, package-lock.json, yarn.lock, NSIS Installers,
NuGet, OPam, Cocoapods, Python PyPI setup.py, setup.cfg, and
several related lockfile formats, semi structured README
files such as README.android, README.chromium, README.facebook, README.google,
README.thirdparty, RPMs, Shell Archives, Squashfs images, Java WAR, Windows
executables and the Windows registry
and a few more. See `all available package parsers <https://scancode-toolkit.readthedocs.io/en/stable/reference/available_package_parsers.html>`_
for the exhaustive list.
See our `roadmap <https://scancode-toolkit.readthedocs.io/en/latest/contribute/roadmap.html>`_
for upcoming features.
Documentation
=============
The ScanCode documentation is hosted at
`scancode-toolkit.readthedocs.io <https://scancode-toolkit.readthedocs.io/en/latest/>`_.
If you are new to visualization of scancode results data, start with our
`newcomer <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/newcomer.html>`_ page.
If you want to compare output changes between different versions of ScanCode,
or want to look at scans generated by ScanCode, review our
`reference scans <https://github.com/nexB/scancode-toolkit-reference-scans>`_.
Other Important Documentation Pages:
- A `synopsis <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/synopsis.html>`_
of ScanCode command line options.
- Tutorials on:
- `How to run a scan <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_run_a_scan.html>`_
- `How to visualize scan results <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_visualize_scan_results.html>`_
- An exhaustive list of `all available options <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html>`_
- Documentation on `Contributing to Code Development <https://scancode-toolkit.readthedocs.io/en/latest/contribute/contrib_dev.html>`_
- Documentation on `Plugin Architecture <https://scancode-toolkit.readthedocs.io/en/latest/plugins/plugin_arch.html>`_
- `FAQ <https://scancode-toolkit.readthedocs.io/en/latest/misc/faq.html>`_
See also https://aboutcode.org for related companion projects and tools.
Installation
============
Before installing ScanCode make sure that you have installed the prerequisites
properly. This means installing Python 3.9 for x86/64 architectures.
We support Python 3.9, 3.10, 3.11 and 3.12.
See `prerequisites <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#prerequisites>`_
for detailed information on the support platforms and Python versions.
There are a few common ways to `install ScanCode <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html>`_.
- `**Installation as an application: Install Python 3.9, download a release archive, extract and run**.
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-as-an-application-downloading-releases>`_
This is the recommended installation method.
- `Development installation from source code using a git clone
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-from-source-code-git-clone>`_
- `Development installation as a library with "pip install scancode-toolkit"
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#pip-install>`_
[Note that this is not supported on arm64 machines]
- `Run in a Docker container with a git clone and "docker run"
<https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-via-docker>`_
- In Fedora 40+ you can `dnf install scancode-toolkit`
Quick Start
===========
After ScanCode is installed successfully you can run an example scan printed on screen as JSON::
scancode -clip --json-pp - samples
Follow the `How to Run a Scan <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_run_a_scan.html>`_
tutorial to perform a basic scan on the ``samples`` directory distributed by
default with ScanCode.
See more command examples::
scancode --examples
See `How to select what will be detected in a scan
<https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_set_what_will_be_detected_in_a_scan.html>`_
and `How to specify the output format <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_format_scan_output.html>`_
for more information.
You can also refer to the `command line options synopsis
<https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/synopsis.html>`_
and an exhaustive list of `all available command line options
<https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html>`_.
Archive extraction
==================
By default ScanCode does not extract files from tarballs, zip files, and
other archives as part of the scan. The archives that exist in a codebase
must be extracted before running a scan: `extractcode` is a bundled utility
behaving as a mostly-universal archive extractor. For example, this command will
recursively extract the mytar.tar.bz2 tarball in the mytar.tar.bz2-extract
directory::
./extractcode mytar.tar.bz2
See `all extractcode options <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html#all-extractcode-options>`_
and `how to extract archives <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_extract_archives.html>`_ for details.
Support
=======
If you have a problem, a suggestion or found a bug, please enter a ticket at:
https://github.com/nexB/scancode-toolkit/issues
For discussions and chats, we have:
* an official Gitter channel for `web-based chats
<https://matrix.to/#/#aboutcode-org_discuss:gitter.im>`_.
Gitter is now accessible through `Element <https://element.io/download>`_
or an `IRC bridge <https://matrix-org.github.io/matrix-appservice-irc/latest/usage.html>`_.
There are other AboutCode project-specific channels available there too.
* The discussion channel for `scancode <https://matrix.to/#/#aboutcode-org_scancode:gitter.im>`_
specifically aimed at users and developers using scancode-toolkit.
Source code and downloads
=========================
* https://github.com/nexB/scancode-toolkit/releases
* https://github.com/nexB/scancode-toolkit.git
* https://pypi.org/project/scancode-toolkit/
* https://github.com/nexB/scancode-thirdparty-src.git
* https://github.com/nexB/scancode-plugins.git
* https://github.com/nexB/thirdparty-packages.git
License
=======
* Apache-2.0 as the overall license
* CC-BY-4.0 for reference datasets (initially was in the Public Domain).
* Multiple other secondary permissive or copyleft licenses (LGPL, MIT,
BSD, GPL 2/3, etc.) for third-party components and test suite code and data.
See the NOTICE file and the .ABOUT files that document the origin and license of
the third-party code used in ScanCode for more details.
.. |azure| image:: https://dev.azure.com/nexB/scancode-toolkit/_apis/build/status/nexB.scancode-toolkit?branchName=develop
:target: https://dev.azure.com/nexB/scancode-toolkit/_build/latest?definitionId=1&branchName=develop
:alt: Azure tests status (Linux, macOS, Windows)
.. |docs-rtd| image:: https://readthedocs.org/projects/scancode-toolkit/badge/?version=latest
:target: https://scancode-toolkit.readthedocs.io/en/latest/?badge=latest
:alt: Documentation Status
.. |docs-github-actions| image:: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml/badge.svg?branch=develop
:target: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml
:alt: Documentation Tests
.. |release-github-actions| image:: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml/badge.svg?event=push
:target: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml
:alt: Release tests
Acknowledgements, Funding, Support and Sponsoring
--------------------------------------------------------
This project is funded, supported and sponsored by:
- Generous support and contributions from users like you!
- the European Commission NGI programme
- the NLnet Foundation
- the Swiss State Secretariat for Education, Research and Innovation (SERI)
- Google, including the Google Summer of Code and the Google Seasons of Doc programmes
- Mercedes-Benz Group
- Microsoft and Microsoft Azure
- AboutCode ASBL
- nexB Inc.
|europa| |dgconnect|
|ngi| |nlnet|
|aboutcode| |nexb|
This project was funded through the NGI0 Discovery Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 825322.
|ngidiscovery| https://nlnet.nl/project/vulnerabilitydatabase/
This project was funded through the NGI0 Entrust Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 101069594.
|ngizeroentrust| https://nlnet.nl/project/Back2source/
This project was funded through the NGI0 Core Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 101092990.
|ngizerocore| https://nlnet.nl/project/Back2source-next/
This project was funded through the NGI0 Core Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 101092990.
|ngizerocore| https://nlnet.nl/project/FastScan/
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 101135429. Additional
funding is made available by the Swiss State Secretariat for Education, Research and Innovation
(SERI).
|ngizerocommons| |swiss| https://nlnet.nl/project/MassiveFOSSscan/
This project was funded through the NGI0 Entrust Fund, a fund established by NLnet with financial
support from the European Commission's Next Generation Internet programme, under the aegis of DG
Communications Networks, Content and Technology under grant agreement No 101069594.
|ngizeroentrust| https://nlnet.nl/project/purl2sym/
.. |nlnet| image:: https://nlnet.nl/logo/banner.png
:target: https://nlnet.nl
:height: 50
:alt: NLnet foundation logo
.. |ngi| image:: https://ngi.eu/wp-content/uploads/thegem-logos/logo_8269bc6efcf731d34b6385775d76511d_1x.png
:target: https://ngi.eu35
:height: 50
:alt: NGI logo
.. |nexb| image:: https://nexb.com/wp-content/uploads/2022/04/nexB.svg
:target: https://nexb.com
:height: 30
:alt: nexB logo
.. |europa| image:: https://ngi.eu/wp-content/uploads/sites/77/2017/10/bandiera_stelle.png
:target: http://ec.europa.eu/index_en.htm
:height: 40
:alt: Europa logo
.. |aboutcode| image:: https://aboutcode.org/wp-content/uploads/2023/10/AboutCode.svg
:target: https://aboutcode.org/
:height: 30
:alt: AboutCode logo
.. |swiss| image:: https://www.sbfi.admin.ch/sbfi/en/_jcr_content/logo/image.imagespooler.png/1493119032540/logo.png
:target: https://www.sbfi.admin.ch/sbfi/en/home/seri/seri.html
:height: 40
:alt: Swiss logo
.. |dgconnect| image:: https://commission.europa.eu/themes/contrib/oe_theme/dist/ec/images/logo/positive/logo-ec--en.svg
:target: https://commission.europa.eu/about-european-commission/departments-and-executive-agencies/communications-networks-content-and-technology_en
:height: 40
:alt: EC DG Connect logo
.. |ngizerocore| image:: https://nlnet.nl/image/logos/NGI0_tag.svg
:target: https://nlnet.nl/core
:height: 40
:alt: NGI Zero Core Logo
.. |ngizerocommons| image:: https://nlnet.nl/image/logos/NGI0_tag.svg
:target: https://nlnet.nl/commonsfund/
:height: 40
:alt: NGI Zero Commons Logo
.. |ngizeropet| image:: https://nlnet.nl/image/logos/NGI0PET_tag.svg
:target: https://nlnet.nl/PET
:height: 40
:alt: NGI Zero PET logo
.. |ngizeroentrust| image:: https://nlnet.nl/image/logos/NGI0Entrust_tag.svg
:target: https://nlnet.nl/entrust
:height: 38
:alt: NGI Zero Entrust logo
.. |ngiassure| image:: https://nlnet.nl/image/logos/NGIAssure_tag.svg
:target: https://nlnet.nl/image/logos/NGIAssure_tag.svg
:height: 32
:alt: NGI Assure logo
.. |ngidiscovery| image:: https://nlnet.nl/image/logos/NGI0Discovery_tag.svg
:target: https://nlnet.nl/discovery/
:height: 40
:alt: NGI Discovery logo
Raw data
{
"_id": null,
"home_page": "https://github.com/nexB/scancode-toolkit",
"name": "scancode-toolkit-mini",
"maintainer": null,
"docs_url": null,
"requires_python": ">=3.9",
"maintainer_email": null,
"keywords": "open source, scan, license, package, dependency, copyright, filetype, author, extract, licensing, scan, sca, SBOM, spdx, cyclonedx",
"author": "nexB. Inc. and others",
"author_email": "info@aboutcode.org",
"download_url": "https://files.pythonhosted.org/packages/d2/75/dfcf03cd7d5431220062ff17ee70fa2aab0cd522d706c17acf8b1dad01a8/scancode-toolkit-mini-32.3.0.tar.gz",
"platform": null,
"description": "================\nScanCode toolkit\n================\n\nA typical software project often reuses hundreds of third-party packages.\nLicense and packages, dependencies and origin information is not always easy to\nfind and not normalized: ScanCode discovers and normalizes this data for you.\n\nRead more about ScanCode here: https://scancode-toolkit.readthedocs.io/.\n\nCheck out the code at https://github.com/nexB/scancode-toolkit\n\nDiscover also:\n\n- The ScanCode.io server project here: https://scancodeio.readthedocs.io\n- The ScanCode Workbench project for visualization of scancode results data:\n https://github.com/nexB/scancode-workbench \n- Other companion SCA projects for code origin, license and security analysis\n here: https://aboutcode.org\n\n\nBuild and tests status\n======================\n\nWe run 30,000+ tests on each commit on multiple CIs to ensure a good platform\ncompabitility with multiple versions of Windows, Linux and macOS.\n\n+------------+--------------+-------------------------+----------------------------+\n| **Azure** | **RTD Build**| **GitHub actions Docs** | **GitHub actions Release** |\n+============+==============+=========================+============================+\n| |azure| | |docs-rtd| | |docs-github-actions| | |release-github-actions| |\n+------------+--------------+-------------------------+----------------------------+\n\n\nWhy use ScanCode?\n=================\n\n- As a **standalone command-line tool**, ScanCode is **easy to install**, run,\n and embed in your CI/CD processing pipeline.\n It runs on **Windows, macOS, and Linux**.\n\n- ScanCode is **used by several projects and organizations** such as\n the `Eclipse Foundation <https://www.eclipse.org>`_,\n `OpenEmbedded.org <https://www.openembedded.org>`_,\n the `FSFE <https://www.fsfe.org>`_,\n the `FSF <https://www.fsf.org>`_,\n `OSS Review Toolkit <http://oss-review-toolkit.org>`_, \n `ClearlyDefined.io <https://clearlydefined.io/>`_,\n `RedHat Fabric8 analytics <https://github.com/fabric8-analytics>`_,\n and many more.\n\n- ScanCode detects licenses, copyrights, package manifests, direct dependencies,\n and more both in **source code** and **binary** files and is considered as the\n best-in-class and reference tool in this domain, re-used as the core tools for\n software composition data collection by several open source tools.\n\n- ScanCode provides the **most accurate license detection engine** and does a\n full comparison (also known as diff or red line comparison) between a database\n of license texts and your code instead of relying only on approximate regex\n patterns or probabilistic search, edit distance or machine learning.\n\n- Written in Python, ScanCode is **easy to extend with plugins** to contribute\n new and improved scanners, data summarization, package manifest parsers, and\n new outputs.\n\n- You can save your scan results as **JSON, YAML, HTML, CycloneDX or SPDX** or\n even create your own format with Jinja templates.\n\n- You can also organize and run ScanCode server-side with the\n companion `ScanCode.io web app <https://github.com/nexB/scancode.io>`_\n to organize and store multiple scan projects including scripted scanning pipelines.\n\n- ScanCode output data can be easily visualized and analysed using the\n `ScanCode Workbench <https://github.com/nexB/scancode-workbench>`_ desktop app.\n\n- ScanCode is **actively maintained**, has a **growing users and contributors\n community**.\n\n- ScanCode is heavily **tested** with an automated test suite of over **20,000 tests**.\n\n- ScanCode has an extensive and growing documentation.\n\n- ScanCode can process packages, build manifest and lockfile formats to collect\n Package URLs and extract metadata: Alpine packages, BUCK files, ABOUT files,\n Android apps, Autotools, Bazel, JavaScript Bower, Java Axis, MS Cab,\n Rust Cargo, Cocoapods, Chef Chrome apps, PHP Composer and composer.lock,\n Conda, CPAN, Debian, Apple dmg, Java EAR, WAR, JAR, FreeBSD packages,\n Rubygems gemspec, Gemfile and Gemfile.lock, Go modules, Haxe packages,\n InstallShield installers, iOS apps, ISO images, Apache IVY, JBoss Sar,\n R CRAN, Apache Maven, Meteor, Mozilla extensions, MSI installers,\n JavaScript npm packages, package-lock.json, yarn.lock, NSIS Installers,\n NuGet, OPam, Cocoapods, Python PyPI setup.py, setup.cfg, and \n several related lockfile formats, semi structured README\n files such as README.android, README.chromium, README.facebook, README.google,\n README.thirdparty, RPMs, Shell Archives, Squashfs images, Java WAR, Windows\n executables and the Windows registry\n and a few more. See `all available package parsers <https://scancode-toolkit.readthedocs.io/en/stable/reference/available_package_parsers.html>`_\n for the exhaustive list.\n\nSee our `roadmap <https://scancode-toolkit.readthedocs.io/en/latest/contribute/roadmap.html>`_\nfor upcoming features.\n\n\nDocumentation\n=============\n\nThe ScanCode documentation is hosted at\n`scancode-toolkit.readthedocs.io <https://scancode-toolkit.readthedocs.io/en/latest/>`_.\n\nIf you are new to visualization of scancode results data, start with our\n`newcomer <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/newcomer.html>`_ page.\n\nIf you want to compare output changes between different versions of ScanCode, \nor want to look at scans generated by ScanCode, review our\n`reference scans <https://github.com/nexB/scancode-toolkit-reference-scans>`_.\n\nOther Important Documentation Pages:\n\n- A `synopsis <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/synopsis.html>`_ \n of ScanCode command line options.\n\n- Tutorials on:\n\n - `How to run a scan <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_run_a_scan.html>`_\n - `How to visualize scan results <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_visualize_scan_results.html>`_\n\n- An exhaustive list of `all available options <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html>`_\n\n- Documentation on `Contributing to Code Development <https://scancode-toolkit.readthedocs.io/en/latest/contribute/contrib_dev.html>`_\n\n- Documentation on `Plugin Architecture <https://scancode-toolkit.readthedocs.io/en/latest/plugins/plugin_arch.html>`_\n\n- `FAQ <https://scancode-toolkit.readthedocs.io/en/latest/misc/faq.html>`_\n\nSee also https://aboutcode.org for related companion projects and tools.\n\n\nInstallation\n============\n\nBefore installing ScanCode make sure that you have installed the prerequisites\nproperly. This means installing Python 3.9 for x86/64 architectures.\nWe support Python 3.9, 3.10, 3.11 and 3.12.\n\nSee `prerequisites <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#prerequisites>`_\nfor detailed information on the support platforms and Python versions.\n\nThere are a few common ways to `install ScanCode <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html>`_.\n\n- `**Installation as an application: Install Python 3.9, download a release archive, extract and run**. \n <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-as-an-application-downloading-releases>`_\n This is the recommended installation method.\n\n- `Development installation from source code using a git clone\n <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-from-source-code-git-clone>`_\n\n- `Development installation as a library with \"pip install scancode-toolkit\"\n <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#pip-install>`_\n [Note that this is not supported on arm64 machines]\n\n- `Run in a Docker container with a git clone and \"docker run\"\n <https://scancode-toolkit.readthedocs.io/en/latest/getting-started/install.html#installation-via-docker>`_\n\n- In Fedora 40+ you can `dnf install scancode-toolkit`\n\n\nQuick Start\n===========\n\nAfter ScanCode is installed successfully you can run an example scan printed on screen as JSON::\n\n scancode -clip --json-pp - samples\n\nFollow the `How to Run a Scan <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_run_a_scan.html>`_\ntutorial to perform a basic scan on the ``samples`` directory distributed by\ndefault with ScanCode.\n\nSee more command examples::\n\n scancode --examples\n\nSee `How to select what will be detected in a scan\n<https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_set_what_will_be_detected_in_a_scan.html>`_\nand `How to specify the output format <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_format_scan_output.html>`_\nfor more information.\n\nYou can also refer to the `command line options synopsis\n<https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/synopsis.html>`_\nand an exhaustive list of `all available command line options\n<https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html>`_.\n\n\nArchive extraction\n==================\n\nBy default ScanCode does not extract files from tarballs, zip files, and\nother archives as part of the scan. The archives that exist in a codebase\nmust be extracted before running a scan: `extractcode` is a bundled utility\nbehaving as a mostly-universal archive extractor. For example, this command will\nrecursively extract the mytar.tar.bz2 tarball in the mytar.tar.bz2-extract\ndirectory::\n\n ./extractcode mytar.tar.bz2\n\nSee `all extractcode options <https://scancode-toolkit.readthedocs.io/en/latest/cli-reference/list-options.html#all-extractcode-options>`_\nand `how to extract archives <https://scancode-toolkit.readthedocs.io/en/latest/tutorials/how_to_extract_archives.html>`_ for details.\n\n\nSupport\n=======\n\nIf you have a problem, a suggestion or found a bug, please enter a ticket at:\nhttps://github.com/nexB/scancode-toolkit/issues\n\nFor discussions and chats, we have:\n\n* an official Gitter channel for `web-based chats\n <https://matrix.to/#/#aboutcode-org_discuss:gitter.im>`_.\n Gitter is now accessible through `Element <https://element.io/download>`_\n or an `IRC bridge <https://matrix-org.github.io/matrix-appservice-irc/latest/usage.html>`_.\n There are other AboutCode project-specific channels available there too.\n\n* The discussion channel for `scancode <https://matrix.to/#/#aboutcode-org_scancode:gitter.im>`_\n specifically aimed at users and developers using scancode-toolkit.\n\nSource code and downloads\n=========================\n\n* https://github.com/nexB/scancode-toolkit/releases\n* https://github.com/nexB/scancode-toolkit.git\n* https://pypi.org/project/scancode-toolkit/\n* https://github.com/nexB/scancode-thirdparty-src.git\n* https://github.com/nexB/scancode-plugins.git\n* https://github.com/nexB/thirdparty-packages.git\n\nLicense\n=======\n\n* Apache-2.0 as the overall license\n* CC-BY-4.0 for reference datasets (initially was in the Public Domain).\n* Multiple other secondary permissive or copyleft licenses (LGPL, MIT,\n BSD, GPL 2/3, etc.) for third-party components and test suite code and data.\n\n\nSee the NOTICE file and the .ABOUT files that document the origin and license of\nthe third-party code used in ScanCode for more details.\n\n\n\n.. |azure| image:: https://dev.azure.com/nexB/scancode-toolkit/_apis/build/status/nexB.scancode-toolkit?branchName=develop\n :target: https://dev.azure.com/nexB/scancode-toolkit/_build/latest?definitionId=1&branchName=develop\n :alt: Azure tests status (Linux, macOS, Windows)\n\n.. |docs-rtd| image:: https://readthedocs.org/projects/scancode-toolkit/badge/?version=latest\n :target: https://scancode-toolkit.readthedocs.io/en/latest/?badge=latest\n :alt: Documentation Status\n\n.. |docs-github-actions| image:: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml/badge.svg?branch=develop\n :target: https://github.com/nexB/scancode-toolkit/actions/workflows/docs-ci.yml\n :alt: Documentation Tests\n\n.. |release-github-actions| image:: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml/badge.svg?event=push\n :target: https://github.com/nexB/scancode-toolkit/actions/workflows/scancode-release.yml\n :alt: Release tests\n\n\nAcknowledgements, Funding, Support and Sponsoring\n--------------------------------------------------------\n\nThis project is funded, supported and sponsored by:\n\n- Generous support and contributions from users like you!\n- the European Commission NGI programme\n- the NLnet Foundation \n- the Swiss State Secretariat for Education, Research and Innovation (SERI)\n- Google, including the Google Summer of Code and the Google Seasons of Doc programmes\n- Mercedes-Benz Group\n- Microsoft and Microsoft Azure\n- AboutCode ASBL\n- nexB Inc. \n\n\n\n|europa| |dgconnect| \n\n|ngi| |nlnet| \n\n|aboutcode| |nexb|\n\n\nThis project was funded through the NGI0 Discovery Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 825322.\n\n|ngidiscovery| https://nlnet.nl/project/vulnerabilitydatabase/\n\n\nThis project was funded through the NGI0 Entrust Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 101069594. \n\n|ngizeroentrust| https://nlnet.nl/project/Back2source/\n\n\nThis project was funded through the NGI0 Core Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 101092990.\n\n|ngizerocore| https://nlnet.nl/project/Back2source-next/\n\n\nThis project was funded through the NGI0 Core Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 101092990. \n\n|ngizerocore| https://nlnet.nl/project/FastScan/\n\n\nThis project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 101135429. Additional\nfunding is made available by the Swiss State Secretariat for Education, Research and Innovation\n(SERI).\n\n|ngizerocommons| |swiss| https://nlnet.nl/project/MassiveFOSSscan/\n\nThis project was funded through the NGI0 Entrust Fund, a fund established by NLnet with financial\nsupport from the European Commission's Next Generation Internet programme, under the aegis of DG\nCommunications Networks, Content and Technology under grant agreement No 101069594. \n\n|ngizeroentrust| https://nlnet.nl/project/purl2sym/\n\n\n.. |nlnet| image:: https://nlnet.nl/logo/banner.png\n :target: https://nlnet.nl\n :height: 50\n :alt: NLnet foundation logo\n\n.. |ngi| image:: https://ngi.eu/wp-content/uploads/thegem-logos/logo_8269bc6efcf731d34b6385775d76511d_1x.png\n :target: https://ngi.eu35\n :height: 50\n :alt: NGI logo\n\n.. |nexb| image:: https://nexb.com/wp-content/uploads/2022/04/nexB.svg\n :target: https://nexb.com\n :height: 30\n :alt: nexB logo\n\n.. |europa| image:: https://ngi.eu/wp-content/uploads/sites/77/2017/10/bandiera_stelle.png\n :target: http://ec.europa.eu/index_en.htm\n :height: 40\n :alt: Europa logo\n\n.. |aboutcode| image:: https://aboutcode.org/wp-content/uploads/2023/10/AboutCode.svg\n :target: https://aboutcode.org/\n :height: 30\n :alt: AboutCode logo\n\n.. |swiss| image:: https://www.sbfi.admin.ch/sbfi/en/_jcr_content/logo/image.imagespooler.png/1493119032540/logo.png\n :target: https://www.sbfi.admin.ch/sbfi/en/home/seri/seri.html\n :height: 40\n :alt: Swiss logo\n\n.. |dgconnect| image:: https://commission.europa.eu/themes/contrib/oe_theme/dist/ec/images/logo/positive/logo-ec--en.svg\n :target: https://commission.europa.eu/about-european-commission/departments-and-executive-agencies/communications-networks-content-and-technology_en\n :height: 40\n :alt: EC DG Connect logo\n\n.. |ngizerocore| image:: https://nlnet.nl/image/logos/NGI0_tag.svg\n :target: https://nlnet.nl/core\n :height: 40\n :alt: NGI Zero Core Logo\n\n.. |ngizerocommons| image:: https://nlnet.nl/image/logos/NGI0_tag.svg\n :target: https://nlnet.nl/commonsfund/\n :height: 40\n :alt: NGI Zero Commons Logo\n\n.. |ngizeropet| image:: https://nlnet.nl/image/logos/NGI0PET_tag.svg\n :target: https://nlnet.nl/PET\n :height: 40\n :alt: NGI Zero PET logo\n\n.. |ngizeroentrust| image:: https://nlnet.nl/image/logos/NGI0Entrust_tag.svg\n :target: https://nlnet.nl/entrust\n :height: 38\n :alt: NGI Zero Entrust logo\n\n.. |ngiassure| image:: https://nlnet.nl/image/logos/NGIAssure_tag.svg\n :target: https://nlnet.nl/image/logos/NGIAssure_tag.svg\n :height: 32\n :alt: NGI Assure logo\n\n.. |ngidiscovery| image:: https://nlnet.nl/image/logos/NGI0Discovery_tag.svg\n :target: https://nlnet.nl/discovery/\n :height: 40\n :alt: NGI Discovery logo\n\n\n\n\n\n\n",
"bugtrack_url": null,
"license": "Apache-2.0 AND CC-BY-4.0 AND LicenseRef-scancode-other-permissive AND LicenseRef-scancode-other-copyleft",
"summary": "ScanCode is a tool to scan code for license, copyright, package and their documented dependencies and other interesting facts. scancode-toolkit-mini is a special build that does not come with pre-built binary dependencies by default. These are instead installed separately or with the extra_requires scancode-toolkit-mini[full]",
"version": "32.3.0",
"project_urls": {
"Homepage": "https://github.com/nexB/scancode-toolkit"
},
"split_keywords": [
"open source",
" scan",
" license",
" package",
" dependency",
" copyright",
" filetype",
" author",
" extract",
" licensing",
" scan",
" sca",
" sbom",
" spdx",
" cyclonedx"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "4ab64c816a3d8b60bdc217f6d7062edecc4ddcc61794d34845d520b1b0228887",
"md5": "691f47e0638fec8182f53bd02698bfc0",
"sha256": "7acabc11b84a471256b7494820416c9cc329e3027aac6f997f8bb17521271244"
},
"downloads": -1,
"filename": "scancode_toolkit_mini-32.3.0-cp310-none-any.whl",
"has_sig": false,
"md5_digest": "691f47e0638fec8182f53bd02698bfc0",
"packagetype": "bdist_wheel",
"python_version": "cp310",
"requires_python": ">=3.9",
"size": 114222377,
"upload_time": "2024-10-21T06:31:33",
"upload_time_iso_8601": "2024-10-21T06:31:33.817095Z",
"url": "https://files.pythonhosted.org/packages/4a/b6/4c816a3d8b60bdc217f6d7062edecc4ddcc61794d34845d520b1b0228887/scancode_toolkit_mini-32.3.0-cp310-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "cddfda705efe90ad6efeb772a862f37966eb269f0f5611d8bb73fdbe6560cf4a",
"md5": "7a8784b4afaf720a33d6b02fa45acbac",
"sha256": "8faa04dc09543b11214326994600b0d1b4aebd1535f67550abccf97d020fe284"
},
"downloads": -1,
"filename": "scancode_toolkit_mini-32.3.0-cp311-none-any.whl",
"has_sig": false,
"md5_digest": "7a8784b4afaf720a33d6b02fa45acbac",
"packagetype": "bdist_wheel",
"python_version": "cp311",
"requires_python": ">=3.9",
"size": 114221900,
"upload_time": "2024-10-21T06:31:29",
"upload_time_iso_8601": "2024-10-21T06:31:29.570421Z",
"url": "https://files.pythonhosted.org/packages/cd/df/da705efe90ad6efeb772a862f37966eb269f0f5611d8bb73fdbe6560cf4a/scancode_toolkit_mini-32.3.0-cp311-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "766c6ffaa74c67c9d2feb146bcce906559198938c5a7bb5b3735d64a484abd9e",
"md5": "2f45a845b8937b749a5016cee8ed0df5",
"sha256": "a3c2f3443e1fc81985004ee9e955dc6630d6df73a0b16dc185f075d997d8ff1d"
},
"downloads": -1,
"filename": "scancode_toolkit_mini-32.3.0-cp312-none-any.whl",
"has_sig": false,
"md5_digest": "2f45a845b8937b749a5016cee8ed0df5",
"packagetype": "bdist_wheel",
"python_version": "cp312",
"requires_python": ">=3.9",
"size": 114221845,
"upload_time": "2024-10-21T06:31:46",
"upload_time_iso_8601": "2024-10-21T06:31:46.794807Z",
"url": "https://files.pythonhosted.org/packages/76/6c/6ffaa74c67c9d2feb146bcce906559198938c5a7bb5b3735d64a484abd9e/scancode_toolkit_mini-32.3.0-cp312-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "926afe4552fca797361f5a3afda3495a2c7e2424d2cf75733878d160ab6c46ef",
"md5": "ae47fc582827a969d80253b1214878a9",
"sha256": "b4dafdb21b31e7cae695d8eaf919658533634f20108229ef75d6ab5cbd77867e"
},
"downloads": -1,
"filename": "scancode_toolkit_mini-32.3.0-cp39-none-any.whl",
"has_sig": false,
"md5_digest": "ae47fc582827a969d80253b1214878a9",
"packagetype": "bdist_wheel",
"python_version": "cp39",
"requires_python": ">=3.9",
"size": 114216163,
"upload_time": "2024-10-21T06:31:57",
"upload_time_iso_8601": "2024-10-21T06:31:57.264361Z",
"url": "https://files.pythonhosted.org/packages/92/6a/fe4552fca797361f5a3afda3495a2c7e2424d2cf75733878d160ab6c46ef/scancode_toolkit_mini-32.3.0-cp39-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "d275dfcf03cd7d5431220062ff17ee70fa2aab0cd522d706c17acf8b1dad01a8",
"md5": "907cedd0138faad7491d22bb554f70b2",
"sha256": "59de86fff8c8b5df4c9362fc8d61472fbf59c734aec621660d9eee831854cf9c"
},
"downloads": -1,
"filename": "scancode-toolkit-mini-32.3.0.tar.gz",
"has_sig": false,
"md5_digest": "907cedd0138faad7491d22bb554f70b2",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.9",
"size": 15334190,
"upload_time": "2024-10-21T06:31:36",
"upload_time_iso_8601": "2024-10-21T06:31:36.428228Z",
"url": "https://files.pythonhosted.org/packages/d2/75/dfcf03cd7d5431220062ff17ee70fa2aab0cd522d706c17acf8b1dad01a8/scancode-toolkit-mini-32.3.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-10-21 06:31:36",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "nexB",
"github_project": "scancode-toolkit",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"requirements": [],
"lcname": "scancode-toolkit-mini"
}
JSON
