All organizations · GSoC 2026 · Security, Development tools

AboutCode

Scan code for origin, license and vulnerabilities

AboutCode.org is a community of open source developers who are trying to make open source easier to use by providing open source tools to discover, identify and track open source components (aka. Software Composition Analysis – SCA). This includes tools, data and standards for code origin, FOSS licenses and security vulnerabilities.

python
javascript
Django+PostgreSQL
C/Rust/Go

dependencies
vulnerabilities
SoftwareCompositionAnalysis
License
SBOM

Project ideas

6 ideas on its 2026 ideas page; of the 6 that state a difficulty: 3 medium, 3 hard. Sizes: 4 medium, 2 large. 9 mentors named.

PURLdb - PopularCode - Find and track actually used and most popular open source code large hard
VulnerableCode: Process unstructured data sources for vulnerabilities (Category A) large hard
VulnerableCode: VulnerableCode Insights (Category B) medium medium
VulnerableCode: Add more data sources and mine the graph to find correlations between vulnerabilitie medium medium
ScanCode.io: migrate to fetching advisories data from vulnerablecode medium medium
Mark required phrases for rules automatically using NLP/AI: medium hard

Read the ideas page. Ideas are for scope reference; never copy one into a proposal.

History

In GSoC since 2017, 9 years. Projects per year: '17: 4, '19: 3, '20: 5, '21: 4, '22: 5, '23: 2, '24: 4, '25: 5, '26: 2.

On GitHub

51 repositories pushed to in the last year. Main languages: Python (30), HTML (4), Batchfile (2), C (2), C# (1), Go (1).

Links and channels

Website: https://aboutcode.org
Ideas page: https://github.com/aboutcode-org/aboutcode/wiki/GSOC-2026-project-ideas
Contributor guide: https://github.com/aboutcode-org/aboutcode/wiki/GSOC-2026
Source code: https://github.com/aboutcode-org
Chat: https://matrix.to/#/#aboutcode-org_gsoc2026:gitter.im

go deeper in your terminal

git-into-gsoc org "AboutCode" --shortlist
git-into-gsoc repos "AboutCode"
git-into-gsoc issues --org "AboutCode"

or ask your assistant:
"Which AboutCode repositories merge
newcomers' pull requests, and which beginner
issues are still free?"

Those commands read live data: which repositories merge outside pull requests, and which beginner issues nobody has claimed. Install in two minutes.