<p><sub>(upon request from comments)</sub></p>

<p><a href="https://www.blackducksoftware.com/products/protex" rel="nofollow noreferrer">BlackDuck</a> has tools to monitor use of open source components, and "manage open source compliance &amp; security"</p>

CC BY-SA 3.0
2017-12-03T23:43:42.017Z
2017-12-03T23:43:42.017Z
Hugues M.
<p>What are available - free and commercial - solutions to create reports about components used in a software project (physically, set of source code repositories), with intelligence on features like security situation and license model of used open source components?</p>

<p>One prominent example is - or was - Nexus Enterprise, but are there other solutions?</p>

<p>An open source monitor that comes to my mind is the Census project for security monitoring:
<a href="https://github.com/linuxfoundation/cii-census" rel="nofollow noreferrer">https://github.com/linuxfoundation/cii-census</a></p>

<p><strong>Note</strong>: my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene.</p>

CC BY-SA 3.0
2017-05-21T11:34:51.003Z
Curious why you said "- or was -" ?
Hugues M.
CC BY-SA 3.0
2017-05-22T16:05:44.987Z
because my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene
Ta Mu
CC BY-SA 3.0
2017-05-22T16:15:27.330Z
Ah, that might be why they included "Repo Health Check" feature in Nexus OSS then, thanks for the reply.
Hugues M.
CC BY-SA 3.0
2017-05-30T10:00:41.620Z
[BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance"
Hugues M.
CC BY-SA 3.0
2017-12-03T14:41:59.367Z
@HuguesM. please post this comment as an answer
030
<security><nexus><n3dr>
What are known component intelligence tools?
Ta Mu
# What are known component intelligence tools?

(Asked by: username_0 on 2017-05-18)

What are available - free and commercial - solutions to create reports about components used in a software project (physically, set of source code repositories), with intelligence on features like security situation and license model of used open source components?

One prominent example is - or was - Nexus Enterprise, but are there other solutions?

An open source monitor that comes to my mind is the Census project for security monitoring:
<https://github.com/linuxfoundation/cii-census>

**Note**: my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene.

**Tags:** security, nexus, n3dr

> **Comments:**
> **username_1**: Curious why you said "- or was -" ?  
> **username_0**: because my impression about Nexus Enterprise is about 2 years old, since then the product name and scope has changed afaik and there are also competitors like Seerene  
> **username_1**: Ah, that might be why they included "Repo Health Check" feature in Nexus OSS then, thanks for the reply.  
> **username_1**: [BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance"  
> **username_2**: @HuguesM. please post this comment as an answer  

---

## 1 answers

### Answer by username_1 on 2017-12-03. Score: 2

(upon request from comments)

[BlackDuck](https://www.blackducksoftware.com/products/protex) has tools to monitor use of open source components, and "manage open source compliance & security"


---

