Fast, portable and reliable dependency analysis for any codebase.
Publisher’s description
What is fossa-cli?
fossa-cli is an open-source program for Windows from FOSSA. It is written in Haskell.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 3.20.7, released on October 22, 2026. 86 versions are listed since May 19, 2023, each with links to its own installer files. That is about 25 releases a year. The last update is less than a month old.
Popularity and file types
The source code on GitHub (fossas/fossa-cli) has 1,526 stars.
Project description on GitHub: “Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
- Frequent updates (about 25 a year)
Cons
- No native ARM64 build
In short: fossa-cli is an open-source Windows tool for 64-bit PCs. It is actively maintained.
Is fossa-cli safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
3D2E4248486ED0FC37C794278134CF565DB234569529056F4A2A75238AB20508· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the fossas/fossa-cli repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- Code review10
- No dangerous workflows10
- Actively maintained10
- Fuzzing10
- Licence declared9
- No binaries in the repository7
- Restricted token permissions0
- OpenSSF Best Practices badge0
- Pinned dependencies0
- Security policy0
- Signed releases0
- Static code analysis0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 86 versions ›86 versions over 3 years · about 25 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 3.20.7Latest | October 22, 2026 | — | 64-bit ZIP |
| 3.20.5 | October 20, 2026 | — | 64-bit ZIP |
| 3.20.4 | October 17, 2026 | — | 64-bit ZIP |
| 3.20.3 | October 16, 2026 | — | 64-bit ZIP |
| 3.20.1 | October 7, 2026 | — | 64-bit ZIP |
| 3.20.0 | September 30, 2026 | — | 64-bit ZIP |
| 3.19.3 | September 24, 2026 | — | 64-bit ZIP |
| 3.19.1 | September 22, 2026 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id FOSSA.FOSSA-cli -escoop install main/fossaRelated guide: How to use winget: install and update apps
Information
- Publisher
- FOSSA
- Licence
- MPL-2.0
- Price
- Free
- Source code
- github.com/fossas/fossa-cli
- Written in
- Haskell
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 3.20.7
- Released
- October 22, 2026
- Added to the catalogue
- May 19, 2023
- Versions listed
- 86
- Updates / year
- 25.1
- GitHub stars
- 1,526
- GitHub forks
- 207
- Website
- github.com
- winget ID
- FOSSA.FOSSA-cli
- Scoop package
- main/fossa
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is fossa-cli free?
Yes. fossa-cli is open-source software under the MPL-2.0 licence.
Is fossa-cli safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install fossa-cli with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does fossa-cli run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of fossa-cli?
The versions page lists all 86 versions with links to their official installer files, back to May 19, 2023.
Can I use fossa-cli without administrator rights?
Yes, it is portable: unpack and run it.