This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

OpossumUI

Free#25 of 28 in Open Source License Compliance Software

OpossumUI: A local review workspace for turning scanner results into attribution and SPDX outputs. Ranked #25 of 28 in Open Source License Compliance Software by our editors (6.6/10); pricing: Free plan; best for desktop attribution review from scanner outputs.

6.6/10Editor score

Visit OpossumUI

OpossumUI6.6 Visit OpossumUI

At a glance

Editor score
6.6 / 10
Pricing
Free plan
Best for
Desktop attribution review from scanner outputs
Free plan
Yes
Paid from
Free
Facts checked
20 Sep 2026

Where it wins
- Combines ScanCode and OWASP Dependency-Check findings
- Edits file or group attributions with evidence and codebase browsing
- Exports SPDX, component-list CSV, and legal follow-up documents
Where it doesn't
- Does not perform source scans itself
- Relies on imported scanner result files
- Focuses on review rather than policy enforcement or obligation tracking

Our verdict on OpossumUI

OpossumUI is an open-source desktop application for auditing and inventorying open-source components in codebases. It is designed for compliance teams and developers who need to review scanner findings, inspect license and copyright evidence, refine attribution data, and prepare component or legal-review documents. The application runs locally on Windows, macOS, and Linux, making it suited to workflows that keep compliance review on a desktop or on-premise environment rather than in a hosted service.

Its strongest capability is the way it brings scanner output into an attribution review workflow. OpossumUI imports ScanCode JSON and OWASP Dependency-Check JSON files, combines findings from multiple analysis tools, and lets reviewers browse scanner evidence alongside codebase file trees. File or group attributions can be created and edited within the application, which gives teams a focused workspace for resolving attribution details after analysis. Integration with OSS Review Toolkit, ScanCode, and OWASP Dependency-Check also places it within an existing open-source compliance toolchain.

The export options make OpossumUI useful beyond inspection. It produces SPDX documents in JSON and YAML, compact and detailed component-list CSV files, and follow-up documents for legal review. However, it is a review tool rather than a source-scanning system: the workflow begins with imported scanner results. It also focuses on attribution, evidence, inventory, and reporting instead of policy enforcement or obligation tracking. Choose OpossumUI when local desktop review and editable attribution records are the priority; choose a broader compliance system when scanning, policy controls, or obligation management need to be handled in the same product.

Your product? Our editors can test OpossumUI in depth and publish a review, labelled as paid · from $149/mo →

OpossumUI pricing

Plans Free planFree Free to use — no paid tier required for the core job.

See plans on github.com

OpossumUI fact sheet

Free plan	Yes
Paid from	Free
Policy enforcement	Not verified
Obligation tracking	Not verified
Attribution reports	Yes
SBOM import formats	ScanCode JSON; OWASP Dependency-Check JSON
Deployment options	On-premise
Source scan methods	Not verified
Deployment	Desktop
Platforms	Windows, macOS, Linux
Support	Community, Docs
Built for	Small business, Mid-market, Enterprise (editorial estimate)
Integrations	3 integrations: OSS Review Toolkit, ScanCode, OWASP Dependency-Check
Pricing	Free plan
Website	github.com
Facts checked	20 Sep 2026

OpossumUI integrations

OpossumUI lists 3 integrations on its own site.

OSS Review Toolkit
ScanCode
OWASP Dependency-Check

Alternatives to OpossumUI

See all OpossumUI alternatives →

Used OpossumUI? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used OpossumUI for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used OpossumUI myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

OpossumUI is listed in our Open Source License Compliance Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/opossumui/"><img src="https://www.itechguides.com/best/badge/opossumui.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update