Source code control

Software Composition Analysis (SCA) is term that is used to classify tools and services that helps organisations build an inventory of open source software components, libraries and frameworks that developers use to build an application. The inventory will profile each of these components' attributes and should include:

Licensing and copyright information

What is the licence of the components and libraries used in software development e.g. AGPLv3 or Apache 2.0 Security vulnerability information Are there any known vulnerabilities in the components. and libraries used in software development e.g. published on the National Vulnerability Database (NVD) Operational information How well supported is the components and libraries used in software development? What is the commit history? Are there later versions of the component? Most discussions related to Software Composition Analysis revolve around tools that scan code. Indeed the market for Software Composition Analysis tools is growing  There is now a Forrester Wave™ for Software Composition Analysis published in 2017.

Tools alone will not deliver an end to end solution for an organsisation. Whether the driver for the project is license compliance, security focussed such as DevSecOps or both, the data still needs interpretation. Mis-interpretation can create more confusion.

For instance, Software Composition Analysis tools generally flag copyleft licences such as the GNU GPL as high risk which is fundamentally flawed assumption. There are many business models where copyleft is the best model so therefore not a risk to an organisation.

We offer fully managed software design and development services using open source technologies, according our clients’ specific requirements. Using our technical set skill, we have developed and delivered exceptional solutions for companies, organisations and governments. Our core competencies in developing and maintaining solutions include: creating portals on cloud environments, custom development, cost-effective hosting on a scalable cloud-based infrastructure, technical support, training and consulting services.

Software design & development services in uk

Software design and development is paramount to a successful business. We understand how important this process is, and have helped hundreds of clients by developing custom software applications to improve their business processes. For each client we have significantly improved their software development efficiency and helped them save money and time. If you want the perfect software for your company, you need the expert design and development services of CDS.

Software design & development services in uk

What is the Application Modernisation Assessment ?

An Application Modernisation Assessment from Source Code Control will provide you with the data and insight you need to make investment decisions.

We use the best-in-class software to collect and analyse your existing application source code, then provide data and insight to plan your PaaS migration journey including  a full security and cost breakdown of the effort required to migrate an existing on-premise application to a PaaS model. This is done following a simple collaborative process and project plan, which you can view at any time:

We work with you to identify the applications suitable for application modernisation migrate to PaaS

Align a project manager to the term of the project

Based on the requirements we will identify the correct tool(s) required. We worked with best of breed solutions such as  Flexera CloudScape, Cloud Pilot and CAST Software.

Implement the chosen tool (s) to scan existing source code

Provide detailed analysis and reports

Then we answer your questions! We provide a full view of deployment across the estate, but crucially with:

If required we can provide software developer resources to assist with the application modernisation development

PaaS migration requirements

Open source Software Composition Analysis

Application and database PaaS analysis with migration  and application modernisation options

Understand “how much effort” is required to move

Get a “to-do” list of actions for each outcome

Costs for target environment

Possible automated migration

Your scenarios explained with financial arguments to help you build your business plan

Important observations and issues in the source code of the existing applications

Our recommendations on where to start

Open source software license compliance is increasingly important as more and more open source components are being used to build software solutions. Source Code Control partnered with OpenChain project to make open source software licensing more accessible through the OpenChain Project.