Black Duck SCABlack Duck
Software composition analysis product that inventories open source components and flags vulnerabilities.
Software Composition Analysis (SCA) Tools
Ranking methodology
In development — no version effective yet.
Decision archetype: marketplace · Scores are category-relative (P-01) and commercial relationships never affect rank (P-04).
Tools (3)
SnykSnyk
Developer security platform that scans dependencies and code for known vulnerabilities.
Sonatype LifecycleSonatype
SCA tool that evaluates open source dependencies against security and license policies in the development pipeline.