OpenSCA-CLI
Check open-source dependencies for vulnerabilities and license compliance with OpenSCA-CLI.
About OpenSCA-CLI
OpenSCA-CLI scans third-party open-source dependencies to identify vulnerabilities and license information. It parses project configuration files for Java, JavaScript, PHP, Ruby, Go, Rust, Erlang and Python, and can save results as JSON or HTML, run via Docker container, and use a local vulnerability database.
It is available for Windows, Linux and macOS. Scanning of Python setup.py, requirements.txt and requirements.in files needs a pipenv environment and internet connection.
Key features
- Scan third-party dependencies for vulnerabilities and licenses
- Parse Maven, Gradle, npm, Composer, gem, Go, Cargo, Rebar, Pip files
- Save scan results to JSON or HTML files
- Run scans via Docker container
- Use local vulnerability database file
- Install on Windows, Linux and macOS
Best for: Developers and teams checking open-source dependencies for vulnerabilities and license issues.
Good for
- Open source repository
- Supports multiple languages and package managers
- Offers JSON and HTML report output
Watch out for
- Detection limited to listed languages and configuration files
- Some Python files need pipenv environment and internet connection
- Building from source needs Go 1.18 and above
OpenSCA-CLI at a glance
- Category
- Privacy & Security › Security Tools
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
OpenSCA-CLI alternatives
Tools and sites you could use instead, ranked by how closely they match.
Superagent’s open-source SDK helps protect AI applications from prompt injection, data leaks, and harmful outputs.
Open source
24 alternatives
Analyze a website with Web Check, an all-in-one tool described as an OSINT utility.
Open source
24 alternatives
Add a proof-of-work CAPTCHA system to an application using the mCaptcha backend component.
FreeOpen source
24 alternatives
Security and best-practice issues in container images can be checked with Dockle.
Open source
24 alternatives
Analyze software with Ghidra, a framework for reverse engineering compiled programs.
Open source
24 alternatives
Add OpenID Connect and OAuth 2.1 identity-provider capabilities through Ory Hydra’s headless APIs.
Open source
24 alternativesPopular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.