On the recordRead 5 Oct 202615 facts
OpenSCA
Plans and prices
OpenSCA
Free
Online and offline use stated; no other plan limits stated
Read 5 Oct 2026 · opensca.xmirror.cn
On the record
- Custom databases
- The product documentation says users can configure vulnerability databases and private package repositories.opensca.xmirror.cn · read 5 Oct 2026
- IDE integrations
- The documentation provides OpenSCA Xcheck plugins for IntelliJ IDEA and VS Code.opensca.xmirror.cn · read 5 Oct 2026
- Intended users
- The maker describes the solution as serving enterprises, organizations, and individual users.opensca.xmirror.cn · read 5 Oct 2026
- Interfaces
- The maker describes use through an IDE, command line, or cloud platform, with online and offline scenarios.opensca.xmirror.cn · read 5 Oct 2026
- Language coverage
- The documented package ecosystems include Maven and Gradle for Java, npm, Composer, Ruby gems, Go modules, pip, Cargo, and Rebar.opensca.xmirror.cn · read 5 Oct 2026
- License
- The OpenSCA-cli repository identifies its license as Apache-2.0.github.com · read 5 Oct 2026
- Operating systems
- The CLI is available for Windows, Linux, and macOS.github.com · read 5 Oct 2026
- Purpose
- OpenSCA analyzes software components and dependencies to identify vulnerabilities and open-source license risks.opensca.xmirror.cn · read 5 Oct 2026
- Report formats
- The CLI supports JSON, XML, HTML, SQLite, CSV, and SARIF reports, alongside several SBOM formats.github.com · read 5 Oct 2026
- SBOM
- It generates SBOMs in DSDX, SPDX, CycloneDX, and SWID formats, and can take an SBOM as input to produce a vulnerability report or convert it to another format.opensca.xmirror.cn · read 5 Oct 2026
- Scanning limitation
- Parsing requirements.txt and requirements.in requires a pipenv environment and an internet connection, according to the language support page.opensca.xmirror.cn · read 5 Oct 2026
- Scan-time factors
- The maker says scanning time depends on package size, network conditions, and programming language.github.com · read 5 Oct 2026
- Support
- The project invites issues and lists [email protected] and QQ group 832039395 for contact.github.com · read 5 Oct 2026
- Vulnerability data
- The CLI documentation says its cloud vulnerability database covers CVE, CWE, NVD, CNVD, and CNNVD, and it also supports a configurable local vulnerability database.github.com · read 5 Oct 2026
