GitHub Store
fossas

fossa-cli

fossas

A zero-configuration polyglot dependency analysis tool supporting 20+ build systems, automatically detecting project dependencies with license scanning, vulnerability scanning, and attribution report generation.

v3.20.10
Published at
13d ago
1,527
Stars
152,588
Download
Synced at
13d ago

Latest release

v3.20.10Oct 31, 2026, 12:11 AM
Downloads slow? Switch the source anytime above

README

Project Overview

FOSSA CLI is a zero-configuration polyglot dependency analysis tool. You can point it at any codebase or build, and it will automatically detect the dependencies being used by your project.

Key Features

  • Automatic dependency analysis for many build tools and languages
  • License scanning
  • Vulnerability scanning
  • Attribution report generation
  • Limited support for vendored dependencies, container scanning, and system dependencies (WIP)

Target Audience

  • Developers who need dependency analysis and compliance checking
  • DevOps and security engineers
  • Open-source compliance teams

Quick Start

  1. macOS/Linux: curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash
  2. macOS (Homebrew): brew install --cask fossa
  3. Windows (PowerShell): Run the install script
  4. Run fossa analyze in your project directory

Core Advantages

  • Zero-configuration, works out of the box
  • Supports 20+ build systems
  • Fast, portable, and reliable
  • Integrates with the FOSSA platform

Release history

Sort