Freedom251 › Open Source License Compliance Software
DejaCode
What DejaCode is
DejaCode is an enterprise application for managing open-source license compliance and software supply-chain integrity. It tracks open-source and third-party components across products, with unlimited products, components, and packages in each plan. Teams can capture, store, import, and manage software bills of materials (SBOMs), including historical records for audits; supported formats include CycloneDX, SPDX, and AboutFile. Users define usage policies at license or package level and connect them with ScanCode, although policy enforcement is advisory. Integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, plus REST API and webhook options. AboutCode connections include ScanCode.io, PurlDB, and VulnerableCode. DejaCode supports web, API, Linux, and self-hosted deployment, with Docker and enterprise installation guidance. Team costs $500 a month and Business costs $1,500 a month, each billed annually; Enterprise pricing is custom. A private evaluation instance lasts 30 days.
Who it suits
DejaCode suits legal and business managers governing open-source use across products and teams. It fits organizations needing SBOM records, license policies, component inventories, and integrations.
What it does well
- Unlimited products, components, and packages
- Historical SBOM records for audits
- CycloneDX, SPDX, and AboutFile imports
- REST API and webhook options
- Web and self-hosted deployment
What to know first
- Policy enforcement is advisory
- Team starts at 5 users
- Business starts at 25 users
- Enterprise pricing is custom
Limits
The private evaluation is limited to 30 days. Team starts at five users and Business at 25 users; Enterprise starts at 50 users and uses custom pricing.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Business | Annual subscription paid at the start of the subscription period · Starting at 25 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation | $1,500 a month |
| Team | Annual subscription paid at the start of the subscription period · Starting at 5 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation | $500 a month |
| Enterprise | Custom based on your requirements; annual subscription paid at the start of the subscription period · Starting at 50 users · unlimited products · additional users available · technical training · web and email support · free 30-day private evaluation | On request |
As public.dejacode.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the DejaCode website
- Choose a web, API, Linux, or self-hosted deployment
- Use the Docker, enterprise, or local development installation route
- Start the private 30-day evaluation with customer data and all features
- Connect development services or AboutCode tools through documented integrations, REST API, or webhooks
- Select a Team, Business, or custom Enterprise subscription
Verdict
DejaCode combines component inventory, SBOM management, policy definition, and supply-chain integrations. Its annual plans publish starting prices for Team and Business, while Enterprise requires a custom quote.
Questions
What does DejaCode cost?
Team is $500 a month on an annual subscription starting at five users. Business is $1,500 a month on an annual subscription starting at 25 users; Enterprise pricing is custom from 50 users.
Is there a free plan or trial?
A free plan is listed, and a private evaluation instance provides customer data, all features, free support, and a 30-day limit.
Which platforms and deployment options are available?
DejaCode is listed for API, Linux, self-hosted, and web use. Documentation covers Docker-based, enterprise, and local development installation.
Which SBOM formats can it import?
Supported import formats are CycloneDX, SPDX, and AboutFile.
What integrations are documented?
Platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo. REST API and webhooks support other services, while AboutCode integrations include ScanCode.io, PurlDB, and VulnerableCode.
Is DejaCode open source?
The DejaCode repository identifies its license as GNU Affero General Public License version 3.
Facts from DejaCode's own pages
- AboutCode tools
- Its documented AboutCode integrations include ScanCode.io for package scanning, PurlDB, and VulnerableCode for vulnerability data. · dejacode.readthedocs.io, 4 Oct 2026
- Audience
- The maker describes DejaCode as a SaaS enterprise application for legal and business managers to manage open-source usage and governance across products and teams. · nexb.com, 4 Oct 2026
- Deployment
- The documentation describes Docker-based installation, enterprise deployment, and local development installation. · dejacode.readthedocs.io, 4 Oct 2026
- Founded
- 2003 · public.dejacode.com, 28 Sept 2026
- Headquarters
- United States · public.dejacode.com, 28 Sept 2026
- Integrations
- Documented platform integrations include GitHub, GitLab, Jira Cloud, SourceHut, and Forgejo, with REST API and webhook options for other services. · dejacode.readthedocs.io, 4 Oct 2026
- Inventory
- It tracks open-source and third-party components across products and supports unlimited products, components, and packages in each plan. · nexb.com, 4 Oct 2026
- Open source
- The DejaCode repository identifies its license as GNU Affero General Public License version 3. · github.com, 4 Oct 2026
- Policies
- Users can define and apply usage policies at the license or package level and integrate them with ScanCode. · public.dejacode.com, 4 Oct 2026
- Private trial
- A private evaluation instance supports customer data and all features, includes free support, and is limited to 30 days. · public.dejacode.com, 4 Oct 2026
- Purpose
- DejaCode is an enterprise application for automating open-source license compliance and software supply-chain integrity. · github.com, 4 Oct 2026
- SBOMs
- It can capture, store, and manage SBOMs and maintain historical data for audits. · public.dejacode.com, 4 Oct 2026
- Security guidance
- For enterprise deployments, the documentation recommends running your own ScanCode.io, PurlDB, and VulnerableCode instances so sensitive or private data is not submitted to public endpoints. · dejacode.readthedocs.io, 4 Oct 2026
- Support
- Team and Business plans list technical training and web and email support. · nexb.com, 4 Oct 2026