For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

OpenSCA

No phone app

6.3No. 11 of 65
in Software Composition Analysis Software
  • Recognised40% of the score20
  • Phone app26% of the score0
  • Documented20% of the score85
  • Free plan14% of the score100
Free plan
Yes
Runs on
Browser extension, Linux, Mac, self-hosted, Web, Windows
Visit site Alternatives

Summary

OpenSCA is ranked #11 of 65 in software composition analysis software on Samsung Mobile US Press. It runs on Browser extension, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

OpenSCA plans and pricing

All plans
OpenSCA Free Online and offline use stated; no other plan limits stated opensca.xmirror.cn · 5 Oct 2026

Compared on software composition analysis software

Free plan
Yesopensca.xmirror.cn
Supported ecosystems
Java/Maven, Java/Gradle, JavaScript/NPM, PHP/Composer, Ruby/gem, Golang/Go mod, Rust/cargo, Erlang/Rebar, Python/Pipopensca.xmirror.cn
SBOM generation
Yesopensca.xmirror.cn
Pull request scanning
Yesopensca.xmirror.cn
Deployment options
hybridopensca.xmirror.cn

Facts

Purpose
OpenSCA analyzes software components and dependencies to identify vulnerabilities and open-source license risks.opensca.xmirror.cn · 5 Oct 2026
SBOM
It generates SBOMs in DSDX, SPDX, CycloneDX, and SWID formats, and can take an SBOM as input to produce a vulnerability report or convert it to another format.opensca.xmirror.cn · 5 Oct 2026
Interfaces
The maker describes use through an IDE, command line, or cloud platform, with online and offline scenarios.opensca.xmirror.cn · 5 Oct 2026
IDE integrations
The documentation provides OpenSCA Xcheck plugins for IntelliJ IDEA and VS Code.opensca.xmirror.cn · 5 Oct 2026
Operating systems
The CLI is available for Windows, Linux, and macOS.github.com · 5 Oct 2026
Language coverage
The documented package ecosystems include Maven and Gradle for Java, npm, Composer, Ruby gems, Go modules, pip, Cargo, and Rebar.opensca.xmirror.cn · 5 Oct 2026
Vulnerability data
The CLI documentation says its cloud vulnerability database covers CVE, CWE, NVD, CNVD, and CNNVD, and it also supports a configurable local vulnerability database.github.com · 5 Oct 2026
Custom databases
The product documentation says users can configure vulnerability databases and private package repositories.opensca.xmirror.cn · 5 Oct 2026
Report formats
The CLI supports JSON, XML, HTML, SQLite, CSV, and SARIF reports, alongside several SBOM formats.github.com · 5 Oct 2026
Scanning limitation
Parsing requirements.txt and requirements.in requires a pipenv environment and an internet connection, according to the language support page.opensca.xmirror.cn · 5 Oct 2026
Scan-time factors
The maker says scanning time depends on package size, network conditions, and programming language.github.com · 5 Oct 2026
Support
The project invites issues and lists [email protected] and QQ group 832039395 for contact.github.com · 5 Oct 2026
License
The OpenSCA-cli repository identifies its license as Apache-2.0.github.com · 5 Oct 2026
Intended users
The maker describes the solution as serving enterprises, organizations, and individual users.opensca.xmirror.cn · 5 Oct 2026

Company

Founded
2014opensca.xmirror.cn · 28 Sept 2026

Best OpenSCA alternatives

See all 20
Accessibility Test Framework for Android No. 1 7.8 Android onlyFreeReversingLabs Cloud Sandbox No. 2 7.2 Android onlySnyk Open Source No. 3 6.4 No phone app$25/moSonatype Nexus Repository No. 4 6.4 No phone app$162.50/moTrivy No. 5 6.4 No phone appFreeComplyVigilance SCA No. 6 6.3 No phone app€10/mo

Where it ranks on Samsung Mobile US Press

Is OpenSCA yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OpenSCA

Sources