That's one of blackduck's offerings: https://www.synopsys.com/software-integrity/open-source-software-audit.html https://www.synopsys.com/software-integrity/ope

That's one of blackduck's offerings: https://www.synopsys.com/software-integrity/open-source-software-audit.html https://www.synopsys.com/software-integrity/open-source-soft... At a previous job we had a audit from them, it seemed to not be too accurate but probably good enough for companies to cover their asses legally.