OSS Review Toolkit

ORT is a FOSS policy automation and orchestration toolkit which you can use to manage open source in a strategic, safe and efficient manner. You can use it to: - Generate CycloneDX, SPDX SBOMs or custom FOSS attribution docs for your software project - Automate your FOSS policy using risk-based Policy as Code to do licensing, security vulnerability checks, InnerSource and engineering standards checks for your software project and its dependencies - Create a source code archive for your software project and its dependencies to comply with certain licenses or have your own copy as nothing on the internet is forever - Correct package metadata or licensing findings yourself, using InnerSource or with the help of the FOSS community