Compare software

Nancy vs Grype: catalog facts
Nancy	Grype
Free Free and open source under the Apache 2.0 licence.	Free The open-source software is available without a license fee. Hosting, hardware and…
Windows, Command line	Windows, macOS, Linux, Command line
Focused on Go module dependencies Easy to add to CI pipelines	Can scan package inventories and software bills of materials.
Only covers Go projects Relies on Sonatype's online vulnerability data	Results depend on package identification and vulnerability database coverage.
Downloadable app	Downloadable app
Open source	Open source
License: Apache-2.0	License: Apache-2.0
Not stated if an account is needed	Not stated if an account is needed
Needs internet	Not stated if it works offline
Official website Full listing and sources Checked October 2, 2026	Official website Full listing and sources Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.