Black Duck Alternatives and Competitors

Find out what your peers are saying about Sonatype Nexus Lifecycle vs. WhiteSource and other solutions. Updated: October 2019.
383,725 professionals have used our research since 2012.

Read reviews of Black Duck alternatives and competitors

Josep Barranco
Real User
Director at a media company with 1,001-5,000 employees
Dec 21 2017

What is most valuable?

Scanning/collecting third-party libraries and classifying license types. In this way we ensure our third-party software policy is followed and that we’re not using… more»

How has it helped my organization?

To prevent shipping commercial or GPL libraries, we scan our repositories.

What needs improvement?

Better ACL and more role definitions. This product could be used by large organisations but it definitely needs a better role/action model. Right now (in my understanding)… more»

What's my experience with pricing, setup cost, and licensing?

Pricing / licensing model changed during last year so I don’t have an opinion here yet.

Which solution did I use previously and why did I switch?

We were using editors or Wiki to keep that information, but obviously it was not updated.

What other advice do I have?

It’s important to define guidelines and best practices regarding how to use the product internally; who defines what? Who accesses what? Best way to integrate my GitHub… more»

Which other solutions did I evaluate?

I evaluated Black Duck.
Find out what your peers are saying about Sonatype Nexus Lifecycle vs. WhiteSource and other solutions. Updated: October 2019.
383,725 professionals have used our research since 2012.
Sign Up with Email