oss-review-toolkit / ort
A suite of tools to automate software compliance checks.
- Stars
- 2,117 stars
- Forks
- 394 forks
- Language
- Kotlin
- License
- APACHE-2.0
- Created
- Oct 19, 2017
- Last push
- Nov 13, 2026
- Updated
- Nov 13, 2026
Why these Tags: an agent read the README and quoted it
- Vulnerability scanner from the readme:
Retrieves security advisories for used dependencies from configured vulnerability data services.
- Dependency management from the readme:
Determines the dependencies of projects and their metadata, abstracting which package managers or build systems are actually being used.
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 12, 2026: 2,116 stars on 2026-11-12.
Star History
190 days recorded, May 8, 2026 – Nov 13, 2026 (UTC). Net change +135 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/oss-review-toolkit/ort) Badge
[](https://awesomerepos.com/oss-review-toolkit/ort) Timeline
It gained stars on 91 of the 190 days recorded since May 8, 2026.
Its largest 7 days were May 8, 2026 to May 14, 2026: 11 stars.
In the 30 days to Nov 13, 2026 it got 22 stars, 5% more than in the 30 days before.
It had 1,982 stars before May 8, 2026 and has 2,117 stars now: 2,883 fewer than 5,000.
- Created on the Repository Host
- +3 stars in one day
- Largest star day recorded: +4 stars
- Release 97.2.0
- Release 97.1.0
- Release 97.3.0
- +4 stars in one day
- Release 98.0.0
- Entered the Repository Index: 2,116 stars on 2026-11-12
- Release 99.0.0
- Latest push
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 13, 2026 – Nov 14, 2026. Forks 0. AwesomeRepos saw a new push on 1 of 1 days.
- Nov 14, 2026: new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Maintenance
2 of 4 checks (2 without data)-
Yes: Not archived
GitHub does not mark the repository as archived. Source
-
Yes: A push in the last 90 days
Last push on 2026-11-13, 0 days ago. Source
-
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
-
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
2 of 3 checks (1 without data)-
Yes: A release in the last 365 days
Newest release 99.0.0 on 2026-11-12, 2 days ago. 10 or more releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is 99.0.0. Source
-
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)-
No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)-
Yes: A licence
GitHub finds the licence APACHE-2.0. Source
-
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
-
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 821 direct packages (scanned on Nov 14, 2026). Packages from 122 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 122
- react/react 253K
npm: react, react-dom
- microsoft/TypeScript 112K
npm: @typescript/typescript-aix-ppc64, @typescript/typescript-darwin-arm64, @typescript/typescript-darwin-x64, @typescript/typescript-freebsd-arm64 and 17 more
-
npm: @tailwindcss/oxide-android-arm64, @tailwindcss/oxide-darwin-arm64, @tailwindcss/oxide-darwin-x64, @tailwindcss/oxide-freebsd-x64 and 10 more
- django/django 92K
PyPI: django
- vitejs/vite 84K
npm: vite
- pallets/flask 75K
PyPI: flask
-
Maven: org.springframework:spring-core
- JetBrains/kotlin 54K
Maven: org.jetbrains.kotlin:kotlin-assignment-compiler-plugin-embeddable, org.jetbrains.kotlin:kotlin-bom, org.jetbrains.kotlin:kotlin-build-tools-compat, org.jetbrains.kotlin:kotlin-build-tools-impl and 10 more
- expo/expo 54K
npm: expo, expo-router
-
npm: prettier
Show all 122
-
npm: @types/node, @types/react, @types/react-dom, @types/react-syntax-highlighter
- babel/babel 44K
npm: babel-cli
-
Swift: github.com/alamofire/alamofire
- psf/black 42K
PyPI: black
- evanw/esbuild 40K
npm: @esbuild/aix-ppc64, @esbuild/android-arm, @esbuild/android-arm64, @esbuild/android-x64 and 23 more
-
npm: cheerio
- TanStack/table 29K
npm: @tanstack/match-sorter-utils, @tanstack/react-table
-
npm: recharts
- rollup/rollup 26K
npm: @rollup/rollup-android-arm-eabi, @rollup/rollup-android-arm64, @rollup/rollup-darwin-arm64, @rollup/rollup-darwin-x64 and 22 more
- biomejs/biome 26K
npm: @biomejs/biome, @biomejs/cli-darwin-arm64, @biomejs/cli-darwin-x64, @biomejs/cli-linux-arm64 and 5 more
-
npm: @typescript/native-preview, @typescript/native-preview-darwin-arm64, @typescript/native-preview-darwin-x64, @typescript/native-preview-linux-arm and 4 more
-
npm: lucide-react
- chalk/chalk 23K
npm: chalk
- mochajs/mocha 23K
npm: mocha
- jsdom/jsdom 22K
npm: jsdom
-
Maven: com.zaxxer:HikariCP
-
Maven: org.jetbrains:annotations
- mdx-js/mdx 20K
npm: @mdx-js/react
-
npm: @testing-library/react
-
npm: radix-ui
- gradle/gradle 19K
Maven: org.gradle:gradle-core, org.gradle:gradle-tooling-api
- dotnet/runtime 18K
NuGet: System.Text.Json
- pallets/click 18K
PyPI: click
-
npm: vitest
-
PyPI: pytest
- ktorio/ktor 15K
Maven: io.ktor:ktor-client-content-negotiation, io.ktor:ktor-client-core, io.ktor:ktor-client-okhttp, io.ktor:ktor-http and 4 more
-
npm: @rolldown/binding-android-arm-eabi, @rolldown/binding-android-arm64, @rolldown/binding-darwin-arm64, @rolldown/binding-darwin-x64 and 11 more
-
Maven: org.jetbrains.kotlinx:kotlinx-coroutines-core, org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm
- rubocop/rubocop 13K
RubyGems: rubocop
-
npm: chokidar
-
NuGet: Newtonsoft.Json
- lukeed/clsx 9.8K
npm: clsx
- JetBrains/Exposed 9.3K
Maven: org.jetbrains.exposed:exposed-core, org.jetbrains.exposed:exposed-dao, org.jetbrains.exposed:exposed-jdbc, org.jetbrains.exposed:exposed-json
-
GitHub Actions: actions/checkout
-
Maven: org.testcontainers:postgresql
- apple/swift-nio 8.6K
Swift: github.com/apple/swift-nio
- sass/node-sass 8.4K
npm: node-sass
- fatih/color 8K
Go: github.com/fatih/color
-
npm: lightningcss-android-arm64, lightningcss-darwin-arm64, lightningcss-darwin-x64, lightningcss-freebsd-x64 and 7 more
- wiremock/wiremock 7.4K
Maven: org.wiremock:wiremock
- TanStack/virtual 7.2K
npm: @tanstack/react-virtual
- detekt/detekt 7.1K
Maven: dev.detekt:detekt-api, dev.detekt:detekt-gradle-plugin, dev.detekt:detekt-psi-utils
-
Maven: org.junit.platform:junit-platform-launcher
- PyCQA/isort 7K
PyPI: isort
- joe-bell/cva 6.9K
npm: class-variance-authority
- pallets/werkzeug 6.9K
PyPI: werkzeug
-
npm: @tailwindcss/typography
-
npm: next-themes
-
Swift: github.com/apple/swift-algorithms
-
RubyGems: nokogiri
-
RubyGems: faraday
-
Maven: org.jetbrains.kotlinx:kotlinx-serialization-core, org.jetbrains.kotlinx:kotlinx-serialization-json
- python-attrs/attrs 5.9K
PyPI: attrs
- mockk/mockk 5.8K
Maven: io.mockk:mockk
- pylint-dev/pylint 5.7K
PyPI: pylint
-
npm: tailwind-merge
-
GitHub Actions: docker/build-push-action
- rack/rack 5.1K
RubyGems: rack
-
GitHub Actions: actions/setup-node
- kotest/kotest 4.8K
Maven: io.kotest:kotest-assertions-core, io.kotest:kotest-assertions-json, io.kotest:kotest-extensions-testcontainers, io.kotest:kotest-framework-engine and 2 more
- ronmamo/reflections 4.8K
Maven: org.reflections:reflections
-
npm: react-syntax-highlighter
-
npm: @testing-library/jest-dom
-
Swift: github.com/apple/swift-collections
- square/wire 4.4K
Maven: com.squareup.wire:wire-gradle-plugin, com.squareup.wire:wire-grpc-client, com.squareup.wire:wire-runtime
- grosser/parallel 4.3K
RubyGems: parallel
-
GitHub Actions: actions/upload-artifact
- gliderlabs/ssh 4.2K
Go: github.com/gliderlabs/ssh
- square/kotlinpoet 4.2K
Maven: com.squareup:kotlinpoet, com.squareup:kotlinpoet-ksp
- apache/tika 4.1K
Maven: org.apache.tika:tika-core
- apple/swift-log 4.1K
Swift: github.com/apple/swift-log
- jruby/jruby 3.9K
Maven: org.jruby:jruby
- Kotlin/dokka 3.8K
Maven: org.jetbrains.dokka:analysis-kotlin-symbols, org.jetbrains.dokka:dokka-base, org.jetbrains.dokka:dokka-core, org.jetbrains.dokka:dokka-gradle-plugin and 1 more
-
Swift: github.com/apple/swift-argument-parser
- tartley/colorama 3.8K
PyPI: colorama
-
npm: web-animations-js
-
Maven: com.fasterxml.jackson.core:jackson-databind
-
Maven: org.apache.logging.log4j:log4j-api, org.apache.logging.log4j:log4j-to-slf4j
- google/ksp 3.5K
Maven: com.google.devtools.ksp:symbol-processing-aa-embeddable, com.google.devtools.ksp:symbol-processing-api, com.google.devtools.ksp:symbol-processing-common-deps, com.google.devtools.ksp:symbol-processing-gradle-plugin
-
npm: @testing-library/dom
- qos-ch/logback 3.2K
Maven: ch.qos.logback:logback-classic
- pallets/itsdangerous 3.1K
PyPI: itsdangerous
- ajalt/clikt 3K
Maven: com.github.ajalt.clikt:clikt
- bcgit/bc-java 2.7K
Maven: org.bouncycastle:bcprov-jdk18on
- rust-lang/libc 2.6K
Cargo: libc
- vsch/flexmark-java 2.6K
Maven: com.vladsch.flexmark:flexmark
- aws/aws-sdk-java-v2 2.6K
Maven: software.amazon.awssdk:s3
-
Go: github.com/hashicorp/go-multierror
- then/promise 2.6K
npm: promise
- rust-lang/log 2.6K
Cargo: log
- pydata/numexpr 2.5K
PyPI: numexpr
- qos-ch/slf4j 2.5K
Maven: org.slf4j:slf4j-api
- pyparsing/pyparsing 2.5K
PyPI: pyparsing
-
npm: markdown-to-jsx
-
Maven: com.fasterxml.jackson.core:jackson-core
-
npm: @testing-library/user-event
-
PyPI: wrapt
- grpc/grpc-swift 2.2K
Swift: github.com/grpc/grpc-swift
- python-rope/rope 2.2K
PyPI: rope
- rust-random/rand 2.1K
Cargo: rand, rand_chacha, rand_os
-
RubyGems: ruby-progressbar
- bevry/cson 1.3K
npm: cson
- isaacs/sax-js 1.2K
npm: sax
- mattn/go-isatty 926
Go: github.com/mattn/go-isatty
-
Go: github.com/mattn/go-colorable
-
PyPI: markupsafe
- schibsted/jslt 702
Maven: com.schibsted.spt.data:jslt
-
PyPI: typing-extensions
-
Maven: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
-
npm: set-value
- rspec/rspec 126
RubyGems: rspec, rspec-mocks
-
npm: is-windows
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 14, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 14, 2026: 2,117 stars, 394 forks, last push Nov 13, 2026, not archived. One of 2 Observations since Nov 13, 2026.