Alternatives and similar repositories for fossa-cli

Users that are interested in fossa-cli are comparing it to the libraries listed below

• src-d / gitbase
  SQL interface to git repositories, written in Go. https://docs.sourced.tech/gitbase
  ☆2,084Updated 2 years ago
• theupdateframework / python-tuf
  Python reference implementation of The Update Framework (TUF)
  ☆1,695Updated this week
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,013Updated last year
• package-url / purl-spec
  A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
  ☆963Updated last week
• oss-review-toolkit / ort
  A suite of tools to automate software compliance checks.
  ☆1,919Updated this week
• todogroup / repolinter
  Repolinter, The Open Source Repository Linter
  ☆462Updated 2 weeks ago
• cla-assistant / cla-assistant
  Contributor License Agreement assistant (CLA assistant)
  ☆1,470Updated last year
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,316Updated this week
• pivotal / LicenseFinder
  Find licenses for your project's dependencies.
  ☆1,786Updated last year
• siderolabs / conform
  Policy enforcement for your pipelines.
  ☆503Updated this week
• repository-settings / app
  Pull Requests for GitHub repository settings
  ☆1,022Updated this week
• grafeas / grafeas
  Artifact Metadata API
  ☆1,563Updated last week
• probot / stale
  A GitHub App built with Probot that closes abandoned Issues and Pull Requests after a period of inactivity.
  ☆1,265Updated 2 years ago
• alexellis / derek
  Reduce maintainer fatigue by automating GitHub
  ☆820Updated last week
• aboutcode-org / scancode-toolkit
  ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party package…
  ☆2,463Updated 2 weeks ago
• replicatedhq / dockerfilelint
  An opinionated Dockerfile linter.
  ☆1,031Updated 2 years ago
• google / addlicense
  A program which ensures source code files have copyright license headers by scanning directory patterns recursively
  ☆861Updated 3 months ago
• mergeability / mergeable
  🤖 All the missing GitHub automation 🙂 🙌
  ☆716Updated last year
• CycloneDX / specification
  OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…
  ☆472Updated 2 weeks ago
• github / git-sizer
  Compute various size metrics for a Git repository, flagging those that might cause problems
  ☆3,971Updated 3 weeks ago
• src-d / hercules
  Gaining advanced insights from Git repository history.
  ☆2,772Updated 3 years ago
• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,285Updated last year
• pinterest / knox
  Knox is a secret management service
  ☆1,256Updated 3 weeks ago
• octobox / octobox
  📮 Untangle your GitHub Notifications
  ☆4,444Updated this week
• buildkite / agent
  The Buildkite Agent is an open-source toolkit written in Go for securely running build jobs on any device or network
  ☆920Updated this week
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,803Updated this week
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆970Updated last week
• cnabio / cnab-spec
  Cloud Native Application Bundle Specification
  ☆971Updated 3 years ago
• facebookincubator / fastmod
  A fast partial replacement for the codemod tool. Assists with large-scale codebase refactors via regex-based find and replace with human …
  ☆1,885Updated 7 months ago
• ossf / allstar
  GitHub App to set and enforce security policies
  ☆1,391Updated last week