The Eclipse Apoapsis project provides a process and reference implementation for large-scale software composition analysis (SCA), based on the OSS Review Toolkit.
The guidance for the Open Source Component Management process consists of a generic architecture description, usage blueprints, a concept of the abstraction layer and a collection of use cases. It shall enable you to quickly match your organization's needs to the available solutions and jump start your process definition by providing templates.
The reference implementation "ORT Server" is based on the "OSS Review Toolkit" which is a suite of tools to automate software compliance checks, hosted in the Linux Foundation. The ORT Server extends extends that with a scalable service that can be used as the core of an Open Source Component Management process.
The ORT-server is implemented in Kotlin and consists of a scalable backend providing an API, access management, a web frontend, and software inventory management.
Name | Date |
---|
Name | Date |
---|---|
Creation Review | 2024-01-19 |