Analyzed
about 18 hours
ago.
based on code collected
2 days
ago.
Project Summary
A new Java-based SPDX generation, analysis, and conversion framework. Unlike other SPDX generation tools, SpdXtra trades in high levels of abstraction for performance and scalability.
Badges
In a Nutshell, spdxtra...
- ...
- ...
- ...
-
...
took an estimated 1 years of effort (COCOMO model)
starting with its first commit in March, 2016
ending with its most recent commit about 10 years ago
Quick Reference
https://github.com/yevster/spdxtra
Apache License 2.0
Permitted
Commercial Use
Modify
Distribute
Place Warranty
Sub-License
Private Use
Use Patent Claims
Forbidden
Hold Liable
Use Trademarks
Required
Include Copyright
State Changes
Include License
Include Notice
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
There are no reported vulnerabilities
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
Did You Know...
-
...
55% of companies leverage OSS for production infrastructure
-
...
anyone with an Open Hub account can update a project's tags
-
...
in 2016, 47% of companies did not have formal process in place to track OS code
-
...
compare projects before you chose one to use
30 Day SummaryMay 18 2026 — Jun 17 2026
|
12 Month SummaryJun 17 2025 — Jun 17 2026
|
