1

What are available - free and commercial - solutions to create reports about components used in a software project (physically, set of source code repositories), with intelligence on features like security situation and license model of used open source components?

One prominent example is - or was - Nexus Enterprise, but are there other solutions?

An open source monitor that comes to my mind is the Census project for security monitoring: https://github.com/linuxfoundation/cii-census

Note: my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene.

  • 1
    Curious why you said "- or was -" ? – Hugues M. May 21 '17 at 11:34
  • because my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene – Peter Muryshkin May 22 '17 at 16:05
  • Ah, that might be why they included "Repo Health Check" feature in Nexus OSS then, thanks for the reply. – Hugues M. May 22 '17 at 16:15
  • 1
    BlackDuck has tools to monitor use of open source components, and "manage open source compliance" – Hugues M. May 30 '17 at 10:00
  • @HuguesM. please post this comment as an answer – 030 Dec 3 '17 at 14:41
2

(upon request from comments)

BlackDuck has tools to monitor use of open source components, and "manage open source compliance & security"

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.