Black Duck Detect is a Java-based Software Composition Analysis (SCA) tool that scans project dependencies to identify open source components, licenses, and security vulnerabilities. It functions as an intelligent client for the Black Duck SCA platform, sending Bill of Materials (BOM) data for risk analysis. The architecture is modular with core detector framework, ecosystem-specific detectors (Maven, NPM, Gradle, etc.), configuration system, workflow orchestration, and tool integrations. Entry points include CLI scripts (detect.sh/detect.ps1) and the DetectorApplication main class. Primary data flows involve configuration parsing, ecosystem detection, dependency extraction, BDIO generation, and upload to Black Duck server. External dependencies include package managers/build tools (mvn, npm, etc.) and libraries like Gson and Apache Commons.