Records remain connected to their sources.

Last updated October 2026

Public catalog

Public entries normalize project names, ecosystems, repository URLs, license identifiers, and release versions from publicly available project metadata. Repository URLs provide the primary source reference.

Workspace records

Private records are supplied by workspace users. Sourcefolio does not verify private notes, release dates, or evaluation decisions.

Corrections

Registered users can update their own workspace records. Public catalog corrections are reviewed separately from private data.

Limits

The catalog is a technical reference, not a vulnerability, legal, licensing, or compliance determination.