All organizations · GSoC 2026 · Web, Security

SW360

Software supply chain management done right !

SW360 is an open source software project licensed under the EPL-2.0 that provides both a web application and a repository to collect, organize and make available information about software components. It establishes a central hub for software components in an organization.

java
react
couchdb
SpringBoot

license compliance
compliance automation
SBOM
component repository
vulnerabilities management

Project ideas

8 ideas on its 2026 ideas page.

Creating Components as a separate service in SW360
CLIXML visualizer for release attachments
Integration of SW360 and LicenseDB
Remove Apache Thrift and Migrate to Direct Spring Service Calls
Archival of Components and Projects
Project 360 view
Customize Copy Project
Provide alternative Component link

Read the ideas page. Ideas are for scope reference; never copy one into a proposal.

History

In GSoC since 2025, 2 years. Projects per year: '25: 2, '26: 3.

On GitHub

5 repositories pushed to in the last year. Main languages: HTML (2), Java (1), Jsonnet (1), TypeScript (1).

Links and channels

Website: https://eclipse.dev/sw360/
Ideas page: https://eclipse.dev/sw360/gsoc/gsoc-projects-2026/
Contributor guide: https://eclipse.dev/sw360/docs/development/
Source code: https://github.com/eclipse-sw360/sw360
Mailing list: sw360-dev@eclipse.org
Chat: https://sw360chat.slack.com/
Chat: https://matrix.to/#/#technology.sw360-general:matrix.eclipse.org

go deeper in your terminal

git-into-gsoc org "SW360" --shortlist
git-into-gsoc repos "SW360"
git-into-gsoc issues --org "SW360"

or ask your assistant:
"Which SW360 repositories merge
newcomers' pull requests, and which beginner
issues are still free?"

Those commands read live data: which repositories merge outside pull requests, and which beginner issues nobody has claimed. Install in two minutes.