API Support for Identifying OSS by file hash

[bjk7119]

Dear ClearlyDefined Team,

First of all, thank you for providing such a valuable API for identifying open source components. It has been incredibly helpful in our efforts to better understand and manage open source usage.

I would like to kindly request a potential enhancement to clearlydefined's APIs. I noticed that the raw data provides hash values for individual files, which is very useful. It would be even more helpful if there were an API endpoint where we could input a file hash and receive information about which open source software (OSS) the file belongs to—if known.

In other words, we hope to be able to use a file’s hash value to directly identify the corresponding OSS component via the API.

This functionality would greatly enhance our ability to identify the origin of open source files more efficiently.

Thank you for considering this request. We truly appreciate the work you do to support the open source community.

Best regards,
Jaekwon Bang

[bjk7119]

Hi @capfei

I hope this message finds you well. I wanted to follow up on the issue which I believe you might have some expertise in.

Could you please take a moment to review it?

Thank you so much for your time and support!

Best regards,
Jaekwon Bang

[capfei]

@qtomlinson Do you know if this is currently available in the API?

[qtomlinson]

@capfei To the best of my knowledge, this functionality is not currently supported in the ClearlyDefined API. @jeffmendoza if you have any insights or additional information, we would greatly appreciate your input.

[bjk7119]

@jeffmendoza
Is there any plan to move forward with this request? I would greatly appreciate your positive consideration.