stale · 0.1 market domain

Software Composition Analysis

Score 15.2 / 100 11 providers 1 APIs Search apis.io →

Providers using this tag (11)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 1 Solid coverage with minor gaps
KonduktoCompanyApplication SecurityASPMVulnerability Management1 API57.8
Developing 4 Usable, with meaningful gaps to close
MendApplication SecuritySASTContainer Security2 APIs53.0FossaCompanySecuritySoftware Supply ChainOpen-Source1 API48.5SonatypeSoftware Supply ChainSecurityVulnerability ManagementSBOM1 API47.5SocketCompanySecuritySoftware Supply Chain SecurityDependency Scanning1 API42.5
Thin 2 Limited public surface area
SynopsysSoftware SecurityApplication Security TestingStatic Analysis2 APIs34.4Black DuckCompanyEnterpriseApplication Security1 API33.7
Emerging 2 Early or largely undocumented
KodemCompanyCybersecurityApplication SecurityRuntime Security1 API20.4CodeSecureCompanyApplication SecurityStatic AnalysisSAST11.3
Minimal 2 Almost no public developer surface
OligoCompanySecurityApplication SecurityRuntime Security9.7deepfactorCompanyCybersecurityApplication SecurityDevSecOps5.0

APIs with this tag (1)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Thin 1 Limited public surface area
Black Duck SCA REST APIREST API for Black Duck SCA (Hub) — projects, versions, components, vulnerabilities, policies, scans, and r...33.7

Score breakdown

Frequency
30.2
log-scaled weighted occurrences
Breadth
0.3
spread across providers
Quality lift
37.3
mean composite of providers using it
Cohesion
0.7
strength of nearest seed neighbor

Related tags

SBOM 9 co-occurrences SAST 5 co-occurrences DevSecOps 9 co-occurrences Application Security 8 co-occurrences Vulnerability Management 9 co-occurrences Security 6 co-occurrences Company 9 co-occurrences

Where this tag comes from

Provider tag11
Api tag1

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/software-composition-analysis"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/software-composition-analysis"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/software-composition-analysis/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.