Issues · oss-review-toolkit/ort · GitHub

Allow "non-repository" input to the analyzer
#8803 · sschuberth opened on Jun 27, 2024
14
Advise about the quality / health of an Open Source project / dependency package
#3317 · sschuberth opened on Nov 10, 2020
9
Make all package managers use the new dependency graph format
#3825 · sschuberth opened on Mar 29, 2021
7

Labels Milestones

`IvyProcessor` silently ignores version ranges with Maven-style qualifiers in bounds (e.g. `[4.2.13.Final,)`

#12026

· martgeor opened

on Jun 17, 2026

Create hint-level issues if excludes / resolutions don't match anything

#12025

· sschuberth opened

on Jun 17, 2026

Yarn2 analyzer: "Could not unambiguously resolve locator" on valid multi-version / compat-patch lockfiles

#12008

· gormed opened

on Jun 15, 2026

Provide a plugin API for policy rule checkers

#11949

· sschuberth opened

on Jun 4, 2026

CycloneDx: Include linkage type in the reports

#11824

· fviernau opened

on May 12, 2026

SpdxDocumentModelMapper: Revisit dependency relationship creation iteration(s)

#11823

· fviernau opened

on May 12, 2026

SPDX reporter crashes on `Map.getValue()`

#11794

· fviernau opened

on May 7, 2026

NPM: Revise handling of `optionalDependencies`

#11782

· fviernau opened

on May 6, 2026

Create a reporter for Siemens "Standard BOM" format (which is CycloneDX compatible)

#11775

· sschuberth opened

on May 4, 2026

Create an advisor for SPDX 3 input

#11749

· sschuberth opened

on Apr 27, 2026

The SPDX reporter disregards scope information

#11728

· sschuberth opened

on Apr 22, 2026

GoMod: Some package version strings do not work with version range matching

#11708

· fviernau opened

on Apr 17, 2026