FossID is a software composition analysis tool that scans code for open source licenses and vulnerabilities.