awesome-ospo

A library and command-line tool to help detect license texts. It's designed to be fast, accurate, and to support a wide variety of license texts.

Recommends an open source license based on the collaboration style and intended use of a project. The site's appendix provides a helpful birds-eye view of terms across the most common licenses.

An open source project and a free service that provides a cached copy of licensing metadata for software components through a simple

An intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.

A command line tool which lists the licenses of all installed packages in a Debian-based system (like Ubuntu).

Fast, portable and reliable dependency analysis for any codebase.

A software suite for collecting and measuring structured data about OSS communities.

A toolset to visualize GitHub archives using Grafana dashboards used by the Cloud Native Computing Foundation and Kubernetes.

Software development analytics platform supporting more than 30 different data sources, part of CHAOSS Software project from The Linux Foundation.

A GitHub Action that searches for pull requests/issues/discussions in a repository or organization and measures several available metrics like time to close and time to first response. It calculates the metrics and writes the metrics to a Markdown file. The issues/pull requests/discussions can be filtered by using a search query.

A contributor relationship management system.

An application that collects information about a GitHub organization and aggregates the data across all projects within that organization into a single user interface to be used by various roles within the owning organization.

Host a webpage to allow people to click and receive an invite to your GitHub Organization.

A tool for transforming and moving code between repositories.

Scan outgoing attempts to push to public repository and raise compliance/info-sec friendly checks before allowing the push to complete.

A GitHub Action that can automate the creation of fork repositories.

A few scripts for managing a GitHub organization.

Some helper scripts to manage GitHub organizations via API.

A program started in 2019 to provide promotional credits to open source projects. Details are in

This program grants Azure credits to open source projects, which developers can use for testing, storage, or other development.

Streamline your workflow and let CLA assistant handle the legal side of contributions to a repository for you. CLA assistant enables contributors to sign CLAs from within a pull request.

GitHub App that enforces the Developer Certificate of Origin (DCO) on Pull Requests.

GitHub bot for dealing with Contributor License Agreements.

A Contributor License Agreement (CLA) service used in the Linux Foundation's LFX platform which lets project contributors read, sign, and submit contributor license agreements easily.

React-based static site generator, specifically developed to more easily help create and maintain open source websites.

Site generator that allows you to build fast websites and apps with React.

Vue-based static site generator, optimized for writing technical documentation.

Helps to discover, assess and mitigate known vulnerabilities in Java and Python projects. Formerly known as "Vulnerability Assessement Tool" (Vulas).

A framework for defining and calculating ratings for open source projects.

Identify the programming languages used in a project.

The Open Source Security Foundation (OpenSSF) Best Practices badge is a way for Free/Libre and Open Source Software (FLOSS) projects to show that they follow best practices. Projects can voluntarily self-certify, at no cost, by using this web application to explain how they follow each best practice. The OpenSSF Best Practices Badge is inspired by the many badges available to projects on GitHub. Consumers of the badge can quickly assess which FLOSS projects are following best practices and as a result are more likely to produce higher-quality secure software.

Analyze a project: How are the maintainers doing?

Lint open source repositories for common issues.

Scaffolding tools for creating and maintaining projects based on Twitter Open Source standards and best practices.