@@ -69,26 +69,20 @@ Each AboutCode project has its own repository:
6969- ** [ FetchCode] ( https://github.com/nexB/fetchcode ) ** is a library
7070 to reliably fetch any code via HTTP, FTP and version control systems such as git.
7171
72- - ** [ python-inspector] ( https://github.com/nexB/python-inspector ) ** and ** [ nuget inspector] ( https://github.com/nexB/nuget-inspector/ ) **
73- inspects manifests and code to resolve dependencies (vulnerable and non-vulnerable) for
74- python and nuget packages respectively.
75-
7672- ** [ Scancode Workbench] ( https://github.com/nexB/scancode-workbench ) ** : a desktop application
7773 based on typescript and react to visualize and review scan results from scancode scans.
7874
7975- ** [ AboutCode Toolkit] ( https://github.com/nexB/aboutcode-toolkit ) ** : a set of command line tools to document
8076 the provenance of your code and generate attribution notices. AboutCode Toolkit uses small yaml files to
8177 document code provenance inside a codebase. The lead maintainer is @chinyeungli
8278
83- - ** [ TraceCode Toolkit] ( https://github.com/nexB/tracecode-toolkit ) ** : a set of tools to trace files from your
84- deployment or distribution packages back to their origin in a development codebase or repository.
85- The primary tool uses strace https://github.com/strace/strace/ to trace system calls on Linux and construct
86- a build graph from syscalls to show which files are used to build a binary. We are contributors to strace.
87- Maintained by @pombredanne
88-
8979- ** [ container-inspector] ( https://github.com/nexB/container-inspector ) ** : a tool to analyze the structure
9080 and provenance of software components in Docker images using static analysis. Maintained by @pombredanne
9181
82+ - ** [ python-inspector] ( https://github.com/nexB/python-inspector ) ** and ** [ nuget inspector] ( https://github.com/nexB/nuget-inspector/ ) **
83+ inspects manifests and code to resolve dependencies (vulnerable and non-vulnerable) for
84+ python and nuget packages respectively.
85+
9286- ** [ license-expression] ( https://github.com/nexB/license-expression/ ) ** : a library to parse, analyze, compare
9387 and normalize SPDX and SPDX-like license expressions using a boolean logic expression engine.
9488 See https://spdx.org/spdx-specification-21-web-version#h.jxpfx0ykyb60 to understand what an expression is.
@@ -102,13 +96,15 @@ Each AboutCode project has its own repository:
10296 https://libraries.io and and [ OSS Review Toolkit] ( https://github.com/heremaps/oss-review-toolkit )
10397 are also using these conventions.
10498
105- - ** [ DeltaCode] ( https://github.com/nexB/deltacode ) ** : a command line tool to compare scans and
106- determine if and where there are material differences that affect licensing.
107-
99+ - ** [ TraceCode Toolkit] ( https://github.com/nexB/tracecode-toolkit ) ** : a set of tools to trace files from your
100+ deployment or distribution packages back to their origin in a development codebase or repository.
101+ The primary tool uses strace https://github.com/strace/strace/ to trace system calls on Linux and construct
102+ a build graph from syscalls to show which files are used to build a binary. We are contributors to strace.
103+ Maintained by @pombredanne
108104
109105We also co-started and worked closely with other FOSS orgs and projects:
110106
111- - [ Package URL] ( https://github.com/package-url ) : an emerging standard to reference software packages of all types with simple,
107+ - [ Package URL] ( https://github.com/package-url ) : a widely used standard to reference software packages of all types with simple,
112108 readable and concise URLs.
113109
114110- [ SPDX] ( http://SPDX.org ) : aka. Software Package Data Exchange, a spec to document the origin and licensing of packages.
0 commit comments