Black Duck by Black Duck

Black Duck SCA is the oldest in the space, and provides a product that technically checks all of the SCA boxes, but is not nearly as user friendly as other tools. They get the job done, but UI is targeted more at security than developers.