The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.
☆222Apr 23, 2024Updated 2 years ago
Alternatives and similar repositories for wg-metrics-and-metadata
Users that are interested in wg-metrics-and-metadata are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OpenSSF Security Tooling Working Group☆329Jul 6, 2025Updated last year
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆228Feb 4, 2026Updated 9 months ago
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆210Nov 5, 2026Updated last week
- Helping allocate resources to secure the critical open source projects we all depend on.☆412Sep 2, 2026Updated 2 months ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Mar 13, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for ope…☆1,088Updated this week
- A community collection of security reviews of open source software components.☆104Feb 29, 2024Updated 2 years ago
- Technical Advisory Council☆155Updated this week
- OpenSSF Governance and Legal Docs☆75Sep 11, 2026Updated 2 months ago
- OpenSSF Endusers Working Group☆28Mar 21, 2024Updated 2 years ago
- A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disc…☆142Aug 19, 2026Updated 2 months ago
- OpenSSF Working Group on Securing Software Repositories☆133Nov 5, 2026Updated last week
- ☆41Jul 9, 2020Updated 6 years ago
- Report missing advisories and corrections on OSS Index☆18Jan 19, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆55Dec 28, 2021Updated 4 years ago
- Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)☆207Aug 21, 2026Updated 2 months ago
- ☆28Mar 17, 2026Updated 7 months ago
- AI skill for securing software dependencies☆17May 28, 2026Updated 5 months ago
- Open Source Package Analysis☆925Updated this week
- OpenSSF Project Template☆23Jun 5, 2026Updated 5 months ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆616Updated this week
- Software Component Verification Standard (SCVS)☆173Apr 1, 2025Updated last year
- Collection of tools for analyzing open source packages.☆373Oct 30, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Supply-chain Levels for Software Artifacts☆1,959Updated this week
- A documentation and tracking project with the goal of making package management systems more secure.☆52Mar 5, 2021Updated 5 years ago
- Sysdig labs☆14Apr 29, 2023Updated 3 years ago
- GitHub App to set and enforce security policies☆1,467Updated this week
- Supply Chain Query Tool☆13May 25, 2022Updated 4 years ago
- AIBOM Workshop RSA 2024☆15May 20, 2024Updated 2 years ago
- Machine-readable specification for the attestation of security-relevant data.☆84Updated this week
- Make AES-GCM safe to use with random nonces, for any practical number of messages.☆19Sep 16, 2025Updated last year
- Build, edit, validate, and export CycloneDX BOMs through an intuitive browser-based interface☆28Jul 24, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Scan GitHub Actions Workflow logs for IOCs☆19Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆123Feb 28, 2026Updated 8 months ago
- Gives criticality score for an open source project☆1,483Aug 27, 2026Updated 2 months ago
- A very vulnerable implementation of a GraphQL API.☆18Mar 27, 2026Updated 7 months ago
- Go client and SDK for Falco☆55Mar 18, 2026Updated 7 months ago
- Open Source Vulnerability schema.☆276Updated this week
- Secure Coding in Python☆22Oct 11, 2024Updated 2 years ago
Are these results useful?