Issues · oss-review-toolkit/ort · GitHub

Allow "non-repository" input to the analyzer
#8803 · sschuberth opened on Jun 27, 2024
14
Advise about the quality / health of an Open Source project / dependency package
#3317 · sschuberth opened on Nov 10, 2020
8
Make all package managers use the new dependency graph format
#3825 · sschuberth opened on Mar 29, 2021
7

Labels Milestones New issue

NPM: Revise handling of `optionalDependencies`

#11782

· fviernau opened

on May 6, 2026

Enhance SPDX / CycloneDX reporters to include `isModified`

#11778

· fviernau opened

on May 5, 2026

Create a reporter for Siemens "Standard BOM" format (which is CycloneDX compatible)

#11775

· sschuberth opened

on May 4, 2026

Create an advisor for SPDX 3 input

#11749

· sschuberth opened

on Apr 27, 2026

The SPDX reporter disregards scope information

#11728

· sschuberth opened

on Apr 22, 2026

GoMod: Some package version strings do not work with version range matching

#11708

· fviernau opened

on Apr 17, 2026

Potential issue with left-over project source code in `ProjectSourceRule`

#11699

· sschuberth opened

on Apr 15, 2026

Support capturing license texts from source code comments

#11668

· tsteenbe opened

on Apr 9, 2026

Support Package-URL in package.spdx.yml for SPDXDocument analyzer

#11667

· tsteenbe opened

on Apr 7, 2026

Scanner fails with InvalidPathException

#11666

· MatthiasGrandl opened

on Apr 7, 2026

Add an analyzer for GitHub actions

#11649

· sschuberth opened

on Mar 31, 2026

Spdx analyzer ignores `dependsOn` and `contains` relationships — all packages reported as direct top-level dependencies

#11647

· willebra opened

on Mar 30, 2026