Abstract: The open source composition analysis tool analyzes the open source composition by testing the open source project, which can effectively improve the transparency of the open source project and reduce the risk of open source. This paper analyzes the development status, detection principles and deployment methods of open source composition analysis tools, and puts forward suggestions for the development of open source composition analysis tools in terms of analyzing open source composition, analyzing open source security, displaying scan results, and providing scan reports.

Key words: open source component analysis, open source risk, open source license