Skip to main content
FOSSA Logo

Resource Library

Discover guides, whitepapers, and tools to help you master software supply chain management.

Featured

Vulnerability Prioritization: An Insider’s Guide to the EPSS Scoring System

WebinarsExternal

Software Composition Analysis: Elements of an Effective Solution

Reports

The Cyber Resilience Act (CRA) for U.S.-Based Companies

Featuring Valerie Aurora

Wed, Nov 18 | 9:00 AM PT / 12:00 PM ET
Upcoming Webinar

Latest

Solution Showcase: Security, Licensing, and the CRA for C/C++

Featuring Cortez Frazier Jr.

Tue, Oct 20 | 9:00 AM PT / 12:00 PM ET
Upcoming Webinar

AI Coding Tools, Copyright Law, and OSS License Compliance, Featuring Heather Meeker

Featuring Heather Meeker

WebinarsExternal

Allan Friedman on SBOMs in Financial Services: PCI DSS, DORA, and More

Featuring Allan Friedman

WebinarsExternal

A Practical Guide to VEX in 2026, with Allan Friedman

Featuring Allan Friedman

WebinarsExternal

Managing Security and Regulatory Compliance for C/C++: A Pragmatic Approach

Featuring Cortez Frazier Jr.

WebinarsExternal

CycloneDX SBOM Format

Interactive Guides

More Resources

SPDX SBOM Format

Interactive Guides

Software Bill of Materials (SBOM)

Interactive Guides

Android Open Source Security

Interactive Guides

Open Source Licenses Guide

Interactive Guides

SBOM Compliance Requirements

Interactive Guides

Software Composition Analysis (SCA)

Interactive Guides

Software Supply Chain Security

Interactive Guides

Open Source License Security in Automotive

Interactive Guides

Developer's Guide to Open Source Software Licenses

Interactive Guides

7 Steps for IPO Due Diligence and Open Source Compliance: From Mutual NDAs to the IPO Roadshow

Infographics

7 Steps for M&A Due Diligence and Open Source Compliance

Infographics

A New Wave of IP Risks: How Open Source is Changing IP Risk in the Software Supply Chain

Whitepapers

Adopting Haskell into an Existing Codebase

Podcasts

An Insider’s Guide to SPDX

WebinarsExternal

Auditing Your Company's Use of Open Source: Checklist for Creating an Open Source Compliance Program

Checklists

Automating Open Source License Compliance Essentials

WebinarsExternal

Building the Foundation of Your SBOM and VEX Programs

WebinarsExternal

Common SBOM Challenges and How to Solve Them

WebinarsExternal

Compliance with the GPLv3 “User Products” Clause and the Impact of SFC v. Vizio

WebinarsExternal

Customizing Your Open Source Compliance Policy, Featuring Heather Meeker

WebinarsExternal

Early-Stage Technology Decisions and Regrets

Podcasts

Evaluating Compliance Technology

Checklists

FOSSA: Open Source Management with Kevin Wang

PodcastsExternal

FOSSA vs. Blackduck by Synopsys

Checklists

Generating, Importing, and Managing SBOMs with FOSSA

WebinarsExternal

Heather Meeker on OSS Compliance: Demystifying License Notices with Automation

WebinarsExternal

How Applause Does Open Source Compliance and Security the Developer's Way

WebinarsExternal

How Kodiak Robotics Automates Open Source Management

WebinarsExternal

How Rancher Labs Increased Development Efficiency and Security with FOSSA

WebinarsExternal

Legal Compliance for Modern Software Development

WebinarsExternal

Live Panel: Simplifying OSS Compliance in the Automotive Industry

WebinarsExternal

Managing Engineering Projects

Podcasts

Modernize Your Open Source Audits: 5 Reasons Spreadsheets Fail for Managing OSS Licenses

Whitepapers

NIS2 Directive: Understanding and Complying with Supply Chain Security Guidance

WebinarsExternal

Open Source Management for Automotive Companies

Infographics

OSS License Compliance: Bridging the Legal-Engineering Divide

WebinarsExternal

SCA Purchasing and Implementation Trends

Podcasts

Sentry’s Software Licensing Journey — And Why It Matters for You

WebinarsExternal

Structuring and Growing a Customer Success Team

Podcasts

The Dos and Don'ts of SBOMs for Security

WebinarsExternal

The Lawyer's Guide to a Comprehensive Open Source Compliance Program

WebinarsExternal

The Lawyer’s Guide to OSS License Compliance Tools, Featuring Heather Meeker

WebinarsExternal

Truth Social, AGPL, and OSS License Compliance

WebinarsExternal

Understanding and Using the CycloneDX SBOM Standard

WebinarsExternal

When "Open Source" Isn’t Open Source, Featuring Heather Meeker

WebinarsExternal