Summary

This articles provide information on the differences between the Compliance Library and the Electronic Update.

Question

What is the difference between the FlexNet Code Insight Compliance Library and the Electronic Update?

Answer

What is an Electronic Update?

An Electronic Update (EU) updates the Code Insight Data Library, which contains:

• Component identification rules
• License detection patterns
• Vulnerability mappings and metadata
• Package recognition rules
• Code Aware analyzer content
• OSS component/version intelligence

The official documentation states that an Electronic Update "provides the basis of a local data library used by Code Insight to identify OSS and third-party code in your codebase" and keeps the latest component, version, license, and vulnerability information available in the product.

Think of it as:
Knowledge updates for Code Insight.

Without Electronic Updates, scans still run, but Code Insight's knowledge of components, licenses, and vulnerabilities becomes outdated.

What is the Compliance Library (CL)?

The Compliance Library (CL) is completely different.

The CL contains:

• Source code fingerprints
• Binary signatures
• OSS source files
• Data used for:
  • Exact Matches
  • Source Code Fingerprinting (SCF)
  • Advanced Analysis

According to the User Guide, Advanced Analysis uses the Compliance Library database to match source code and fingerprints found in scanned files.

Think of the CL as:
The huge reference database that scans compare code against.

The Difference