No. 14 of 28 ·Open Source License Compliance Software

FOSSLight Hub

Web · Self-hosted · API

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

FOSSLight Hub is ranked #14 of 28 in open source license compliance software on Freedom251. It runs on API, Self-hosted, Web. There is a free plan.

FOSSLight Hub plans and pricing

All plans

FOSSLight Hub Free Released under AGPL-3.0; self-hosted installation is documented fosslight.org · 7 Oct 2026

Compared on open source license compliance software

Obligation tracking: Yes
Attribution reports: Yes
SBOM import formats: SPDX, CycloneDX
Deployment options: both
Source scan methods: multiple

Best FOSSLight Hub alternatives

See all 20

Two bars FOSSology Free tier No. 1Free6.6 Two bars Apache Flink CDC Free tier No. 2Free6.5 Two bars DeepFilterNet Free tier No. 3Free6.5 Two bars licscan Free tier No. 4Free6.5 Two bars OHRisk Free tier No. 5Free6.5 Two bars OSS Review Toolkit Free tier No. 6Free6.5

The record

Purpose: FOSSLight Hub manages open source, licenses, vulnerabilities, project BOMs, and open source compliance workflows.
License management: It manages open source information, license restrictions, and vulnerabilities, with bulk registration for open source and licenses.
Compliance: It supports an all-in-one compliance process, including generating open source notices, verifying disclosed source, and tracking issues.
SBOM: It manages open source and proprietary software in SBOMs, supports SPDX, and can search projects by software.
Supply chain: It can manage third-party software and agreements as projects.
Security: The project Security tab tracks vulnerability findings from the project SBOM, with a configurable vulnerability score threshold and resolution status.
Vulnerability data caveat: The Security tab does not show vulnerability lists by ID for OSS entries without a version, because accurate vulnerability verification is difficult without that version.
Automation: The documented REST API can query project vulnerability information as JSON and upload analyzed open source reports.
Jira workflow: A project can designate a registered Hub user as the responsible person assigned to security-related Jira issues; the creator is assigned by default if none is designated.
Deployment: The maker documents Docker and Docker Compose installation, or a Java installation requiring Java 11 or higher, MariaDB 10.0 or higher or MySQL 5.6 or higher, and at least 8 GB memory.
Access: The guide lists an LGE-only Hub and FOSSLight Enterprise, which requires a separate account; account inquiries go to [email protected].
License: The Hub is released under the AGPL-3.0 open source license.
Intended users: Project distribution types include general software distribution, internal transfer, B2B, internal-only software, self-check, and open source contribution.
Price from: Free

Where it ranks on Freedom251

Best Open Source License Compliance Software in 2026#14 of 28

Is FOSSLight Hub yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote FOSSLight Hub

Sources

fosslight.org· checked 7 Oct 2026
github.com/fosslight/fosslight· checked 7 Oct 2026
fosslight.org/hub-guide-en/tutorial/1_project/5_secur· checked 7 Oct 2026
fosslight.org/hub-guide-en/advanced/2_rest_api_2.html· checked 7 Oct 2026
fosslight.org/hub-guide-en/tutorial/1_project/1_creat· checked 7 Oct 2026
fosslight.org/hub-guide/advanced/1_developer.html· checked 7 Oct 2026
fosslight.org/hub-guide-en/menu/1_sign.html· checked 7 Oct 2026
fosslight.org/hub-guide-en/· checked 7 Oct 2026