Compliance

License obligations, attribution, and policy enforcement for the open source in your code.

5 min read

Prerequisites: At least one project imported and scanning.

Start here

For Legal & Compliance

Step-by-step onboarding path

What's inside

License Compliance

Detect licenses, understand obligations, and track compliance posture.

Attribution Reports

Generate a fully-compliant attribution document or SBOM for any project with one click.

Licensing Policies

Approve, flag, or deny specific SPDX licenses across your organization.

Reviewing Licensing Issues

Work through your licensing issue backlog with bulk actions.

Snippet Scanning

Detect copied code fragments and their associated license obligations.

Binary / Decomp Analysis

Identify open source in compiled binaries and archives.

Terms & Legal Docs

FOSSA terms of service and legal documentation.

Key concepts

How policy evaluation works

Understand how FOSSA evaluates license policies against your dependency graph.

How license detection works

How FOSSA identifies and classifies licenses across your dependencies.