The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.
☆222Apr 23, 2024Updated 2 years ago
Alternatives and similar repositories for wg-metrics-and-metadata
Users that are interested in wg-metrics-and-metadata are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OpenSSF Security Tooling Working Group☆328Jul 6, 2025Updated last year
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆230Feb 4, 2026Updated 8 months ago
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆209Sep 12, 2026Updated last month
- Helping allocate resources to secure the critical open source projects we all depend on.☆413Sep 2, 2026Updated last month
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Mar 13, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope…☆1,083Updated this week
- Technical Advisory Council☆153Oct 13, 2026Updated last week
- A community collection of security reviews of open source software components.☆102Feb 29, 2024Updated 2 years ago
- OpenSSF Governance and Legal Docs☆75Sep 11, 2026Updated last month
- OpenSSF Endusers Working Group☆28Mar 21, 2024Updated 2 years ago
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆142Aug 19, 2026Updated 2 months ago
- OpenSSF Working Group on Securing Software Repositories☆134Apr 6, 2026Updated 6 months ago
- Report missing advisories and corrections on OSS Index☆18Jan 19, 2023Updated 3 years ago
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆55Dec 28, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)☆206Aug 21, 2026Updated 2 months ago
- ☆27Mar 17, 2026Updated 7 months ago
- OpenSSF Scorecard - Security health metrics for Open Source☆5,770Updated this week
- Software Component Verification Standard (SCVS)☆171Apr 1, 2025Updated last year
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆551Updated this week
- OpenSSF Project Template☆22Jun 5, 2026Updated 4 months ago
- Supply Chain Query Tool☆13May 25, 2022Updated 4 years ago
- AIBOM Workshop RSA 2024☆15May 20, 2024Updated 2 years ago
- A documentation and tracking project with the goal of making package management systems more secure.☆52Mar 5, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Supply-chain Levels for Software Artifacts☆1,948Oct 13, 2026Updated last week
- FINOS Financial Objects Program Documentation☆51Aug 13, 2026Updated 2 months ago
- GitHub App to set and enforce security policies☆1,461Oct 12, 2026Updated last week
- Open Source Package Analysis☆921Sep 25, 2026Updated 3 weeks ago
- Sysdig labs☆14Apr 29, 2023Updated 3 years ago
- Kilt is a project that defines how to inject foreign apps into containers☆13Dec 15, 2023Updated 2 years ago
- Machine-readable specification for the attestation of security-relevant data.☆82Oct 15, 2026Updated last week
- Build, edit, validate, and export CycloneDX BOMs through an intuitive browser-based interface☆27Jul 24, 2026Updated 2 months ago
- Make AES-GCM safe to use with random nonces, for any practical number of messages.☆19Sep 16, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Scan GitHub Actions Workflow logs for IOCs☆19Oct 14, 2026Updated last week
- Collection of tools for analyzing open source packages.☆371Jul 31, 2026Updated 2 months ago
- Data about all known supply-chain attacks through history☆80Oct 13, 2026Updated last week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆123Feb 28, 2026Updated 7 months ago
- Open Source Vulnerability schema.☆272Oct 14, 2026Updated last week
- Go client and SDK for Falco☆55Mar 18, 2026Updated 7 months ago
- A very vulnerable implementation of a GraphQL API.☆18Mar 27, 2026Updated 6 months ago