Answers: <p><sub>(upon request from comments)</sub></p>
  
  <p><a href="https://www.blackducksoftware.com/products/protex" rel="nofollow noreferrer">BlackDuck</a> has tools to monitor use of open source components, and "manage open source compliance &amp; security"</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-12-03T23:43:42.017Z
Answers: 2017-12-03T23:43:42.017Z
Answers: Hugues M.
Body: <p>What are available - free and commercial - solutions to create reports about components used in a software project (physically, set of source code repositories), with intelligence on features like security situation and license model of used open source components?</p>
  
  <p>One prominent example is - or was - Nexus Enterprise, but are there other solutions?</p>
  
  <p>An open source monitor that comes to my mind is the Census project for security monitoring:
  <a href="https://github.com/linuxfoundation/cii-census" rel="nofollow noreferrer">https://github.com/linuxfoundation/cii-census</a></p>
  
  <p><strong>Note</strong>: my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene.</p>
  
Comments: CC BY-SA 3.0
Comments: 2017-05-21T11:34:51.003Z
Comments: Curious why you said "- or was -" ?
Comments: Hugues M.
Comments: CC BY-SA 3.0
Comments: 2017-05-22T16:05:44.987Z
Comments: because my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene
Comments: Ta Mu
Comments: CC BY-SA 3.0
Comments: 2017-05-22T16:15:27.330Z
Comments: Ah, that might be why they included "Repo Health Check" feature in Nexus OSS then, thanks for the reply.
Comments: Hugues M.
Comments: CC BY-SA 3.0
Comments: 2017-05-30T10:00:41.620Z
Comments: [BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance"
Comments: Hugues M.
Comments: CC BY-SA 3.0
Comments: 2017-12-03T14:41:59.367Z
Comments: @HuguesM. please post this comment as an answer
Comments: 030
Tags: <security><nexus><n3dr>
Title: What are known component intelligence tools?
UserDisplayName: Ta Mu
ThreadText: # What are known component intelligence tools?
  
  (Asked by: username_0 on 2017-05-18)
  
  What are available - free and commercial - solutions to create reports about components used in a software project (physically, set of source code repositories), with intelligence on features like security situation and license model of used open source components?
  
  One prominent example is - or was - Nexus Enterprise, but are there other solutions?
  
  An open source monitor that comes to my mind is the Census project for security monitoring:
  <https://github.com/linuxfoundation/cii-census>
  
  **Note**: my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene.
  
  **Tags:** security, nexus, n3dr
  
  > **Comments:**
  > **username_1**: Curious why you said "- or was -" ?  
  > **username_0**: because my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene  
  > **username_1**: Ah, that might be why they included "Repo Health Check" feature in Nexus OSS then, thanks for the reply.  
  > **username_1**: [BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance"  
  > **username_2**: @HuguesM. please post this comment as an answer  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2017-12-03. Score: 2
  
  (upon request from comments)
  
  [BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance & security"
  
  
  ---
  
  