OSSKB

What OSSKB is

OSSKB helps professional users identify open source software in source code, including small code snippets, and gather information relevant to license compliance. It compares source fingerprints with a database of fingerprints for known open source software. Results may include license names, copyright statements, quality indicators, and vulnerability information. The service is powered by the Open Source Software Knowledge Base, which SCANOSS created and maintains. OSSKB is available through the web and API, and the maker lists a Python scanner plus Audit Workbench downloads for macOS Intel, macOS M1/M2, and Linux. A compatible command-line interface or webhook can be used for automation. The service is free of charge on a best-effort basis, with no guarantee of availability or performance; the provider may limit transaction frequency. Its terms allow usage information to be logged to monitor load and improve the service. The maker warns that fingerprint matching can miss software or identify it incorrectly, so a person must assess results further. The terms say OSSKB is for professional use, not end consumers.

Who it suits

OSSKB suits professional teams that need to identify open source code and review license-related information. It may fit workflows using its listed scanner, Audit Workbench, API, CLI, or webhook.

Limits

The free service is provided on a best-effort basis without a guarantee of availability or performance. The provider may limit transaction counts or frequency, and fingerprint results require further human assessment.

Getting started

1. Visit the OSSKB website.
2. Use the web service or API, or choose a listed platform.
3. Download the Python scanner or the Audit Workbench for macOS Intel, macOS M1/M2, or Linux.
4. For automation, get a compatible CLI or webhook.

Verdict

OSSKB provides code-fingerprint matching and license-related details for professional use, at no charge. Treat its output as a starting point for human review, not a final identification.