User Guides
User Products
-
BinarySniffer - Binary Static Analysis
BinarySniffer is a high-performance CLI tool for detecting open source components in binary files. It can analyze executables, shared libraries, APK files, and other binary formats to identify embedded binary blobs.
-
OSSLiLi - License and Copyright extraction
Instructions for using the osslili package to identify licenses and extract copyright information from local source code.
-
OSPAC (Open Source Policy as Code) policy engine
Declarative, data-driven approach where all compliance logic, rules, and decisions are defined in versionable policy files rather than hardcoded in application logic.
-
UPMEX - Universal Package Metadata Extractor
How to extract standardized metadata, licenses, and dependency information from packages across 13 ecosystems, covering installation, the CLI commands, and the supported package formats.
Technical Architecture
-
SPDX License Data Management
This document describes how to update the bundled SPDX license data used by osslili for license detection, which is used by all other products.
-
BinarySniffer Signature Management
How to create, update, and manage signature databases for the BinarySniffer.
-
OSPAC License Dataset and LLM Enrichment
How the bundled SPDX license dataset is shaped and regenerated, including where the LLM enrichment step fits in the pipeline and which parts of a license record it is not allowed to decide.
-
UPMEX Python API
Reference for embedding UPMEX as a library, including the extractor interfaces, the metadata objects it returns, and how to wire it into your own tooling.