Grype vs ScanCode.io

Grype

7.1 #10 in Software Composition Analysis Software

About Grype

ScanCode.io

6.1 #20 in Software Composition Analysis Software

About ScanCode.io
GrypeScanCode.io
Free planYesNo
Free trialNoNo
Paid fromFree—
Open sourceNoNo
PlatformsLinux, macOS, self-hosted, WindowsWeb, Linux, macOS, Windows
Free planYes—
Supported ecosystemsAlpine, Debian, Ubuntu, RHEL, SUSE, Amazon Linux, PyPI, npm, Maven, Go modules, Composer, NuGet, Pub, RubyGems, Crates, Swift, GitHub Actions, Bitnami, Conda, WordPress pluginsnpm, PyPI, Maven, NuGet, RubyGems, Cargo, Composer, Conda, Docker; Java, Scala, Kotlin, Groovy, Clojure, JavaScript, TypeScript, Go, Rust, Python, Debian
SBOM generationYesYes
Deployment optionsself_hostedself_hosted
Pull request scanning—Yes

Both are listed in Best Software Composition Analysis Software. On The Geeks Club, Grype scores higher on our published basis.