niche · -0.9

Software Composition Analysis

Score 16.9 / 100 14 providers 1 APIs Search apis.io →

Providers using this tag (14)

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Strong 1 Solid coverage with minor gaps
KonduktoCompanyApplication SecurityASPMVulnerability Management1 API59.4
Developing 4 Usable, with meaningful gaps to close
SocketSupply Chain SecurityOpen Source SecuritySCA15 APIs53.9FossaCompanySecuritySoftware Supply ChainOpen-Source1 API48.7MendApplication SecuritySASTContainer Security2 APIs46.8SocketCompanySecuritySoftware Supply Chain SecurityDependency Scanning1 API43.4
Thin 5 Limited public surface area
Fortify SoftwareCompanySecurityApplication SecurityAppSec1 API37.4Black Duck SoftwareCompanySecurityApplication Security36.4SonatypeSoftware Supply ChainSecurityVulnerability ManagementSBOM1 API36.4SynopsysSoftware SecurityApplication Security TestingStatic Analysis2 APIs35.1Black DuckCompanyEnterpriseApplication Security1 API33.7
Emerging 2 Early or largely undocumented
KodemCompanyCybersecurityApplication SecurityRuntime Security1 API19.4CodeSecureCompanyApplication SecurityStatic AnalysisSAST11.3
Minimal 2 Almost no public developer surface
OligoCompanySecurityApplication SecurityRuntime Security9.7deepfactorCompanyCybersecurityApplication SecurityDevSecOps5.0

APIs with this tag (1)

Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Thin 1 Limited public surface area
Black Duck SCA REST APIREST API for Black Duck SCA (Hub) — projects, versions, components, vulnerabilities, policies, scans, and r...33.7

Score breakdown

Frequency
33.1
log-scaled weighted occurrences
Breadth
0.4
spread across providers
Quality lift
42.0
mean composite of providers using it
Cohesion
0.9
strength of nearest seed neighbor

Related tags

Open Source Security 5 co-occurrences SBOM 10 co-occurrences SAST 7 co-occurrences DevSecOps 11 co-occurrences Application Security 10 co-occurrences Vulnerability Management 11 co-occurrences Security 8 co-occurrences Company 11 co-occurrences

Where this tag comes from

Provider tag14
Api tag1

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this
  • find_tagsBrowse and filter every tag in the catalog.
  • get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
  • cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
  • cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This tag 
curl "https://apis.io/api/v1/tags/software-composition-analysis"
All tags 
curl "https://apis.io/api/v1/tags?limit=25"
As a scored cohort 
curl "https://apis.io/api/v1/cohorts/tag/software-composition-analysis"
The distribution (Pro) 
curl "https://apis.io/api/v1/cohorts/tag/software-composition-analysis/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.