Go
sigstore/rekor
Software Supply Chain Transparency Log
Apache-2.010 sept 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#provenance
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
97 registros
Go
sigstore/rekor-tiles
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
Apache-2.015 sept 2026 · métricas 2.10.0
PyPI
aiidateam/aiida-core
The official repository for the AiiDA code
Licencia propia7 sept 2026 · métricas 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.014 sept 2026 · métricas 2.10.0
Go
kubernetes-sigs/tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
Apache-2.013 sept 2026 · métricas 2.10.0
PyPI · crates.io
Rul1an/assay
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
MIT13 oct 2026 · métricas 2.10.0
crates.io · npm
sinelaw/fresh
Terminal based IDE & text editor: easy, powerful and fast
GPL-2.028 ago 2026 · métricas 2.10.0
PyPI
aboutcode-org/scancode-toolkit
:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!
Licencia propia12 sept 2026 · métricas 2.10.0
PyPI
agentrust-io/trace-tests
TRACE compliance test suite. Conformance tests for TRACE Certification.
Apache-2.03 oct 2026 · métricas 2.10.0
npm
blamejs/blamejs
The Node framework that owns its stack.
Apache-2.020 oct 2026 · métricas 2.10.0
PyPI · npm
zhurong2020/pyobfus
AST-based Python obfuscator with reverse stack-trace mapping — obfuscate before shipping and keep production tracebacks AI-debuggable. MCP + VS Code.
Apache-2.020 oct 2026 · métricas 2.10.0
npm · crates.io
skilld-dev/skilld
Curated agent skills by humans. Search, run, install, and keep them current from one CLI.
MIT19 sept 2026 · métricas 2.10.0
PyPI
wiltodelta/remove-ai-watermarks
Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks.
Apache-2.016 sept 2026 · métricas 2.10.0
PyPI · npm
creatornader/atrib
Verifiable agent actions. Every action becomes signed context for the next. Ed25519 signatures, Merkle log proofs, independently verifiable by anyone.
Apache-2.08 sept 2026 · métricas 2.10.0
Go
liatrio/autogov
Unified CLI for software supply-chain governance / verify GitHub artifact attestations, evaluate OPA/Rego policies, generate SLSA Verification Summary Attestations (VSAs), and manage releases.
Apache-2.015 sept 2026 · métricas 2.10.0
npm · crates.io
runxhq/runx
the governed runtime for agent skill workflows, off the leash but on the record
Apache-2.08 sept 2026 · métricas 2.10.0
npm
Protocol-Wealth/pwos-core
Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.
Apache-2.013 sept 2026 · métricas 2.10.0
PyPI · npm
alizahidraja/isnad
Grade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines
Apache-2.021 oct 2026 · métricas 2.10.0
PyPI
b7n0de/proofbundle
Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
MIT13 sept 2026 · métricas 2.10.0
npm
inflexa-ai/tsprov
W3C PROV provenance documents in TypeScript - typed authoring plus PROV-JSON/PROV-N round-tripping
Apache-2.030 sept 2026 · métricas 2.10.0
Go
truestamp/truestamp-cli
Truestamp CLI
Apache-2.019 oct 2026 · métricas 2.10.0
npm · crates.io · Go
zerkerlabs/treeship
Portable trust receipts for agent workflows. Signed, chained, verifiable.
Apache-2.01 oct 2026 · métricas 2.10.0
npm
aikdna/kdna-studio-core
KDNA Studio authoring core for structuring, reviewing, and exporting versioned judgment assets.
Apache-2.013 sept 2026 · métricas 2.10.0
PyPI · crates.io
adobe/trustmark
TrustMark - Universal Watermarking for Arbitrary Resolution Images
Licencia propia3 oct 2026 · métricas 2.10.0
npm
aikdna/kdna-studio-cli
KDNA Studio CLI for making implicit judgment explicit, reviewing it, and exporting versioned KDNA assets.
Apache-2.09 sept 2026 · métricas 2.10.0
npm
basou-dev/basou
Provenance layer for AI agent sessions — record, replay, and reason about Claude Code (and other agent) work.
Apache-2.020 oct 2026 · métricas 2.10.0
PyPI
bhargavamin/contexer
Contexer keeps the important engineering decisions behind your software current and available to every coding agent.
Licencia propia9 sept 2026 · métricas 2.10.0
Go
git-pkgs/sigstore
sigstore-go wrapper for verifying attestation bundles against the Sigstore TUF trust root
MIT19 sept 2026 · métricas 2.10.0
PyPI
russalo/file-observer
Deterministic file observation for pipelines — one read-only pass over a directory emits a reproducible JSON manifest of every file's type, metadata, structure, and provenance.
Licencia propia10 sept 2026 · métricas 2.10.0
crates.io · Maven
worldcoin/mobile-bench-rs
Benchmarking tool for Rust functions on mobile devices using BrowserStack.
MIT10 sept 2026 · métricas 2.10.0