Go · npm
mindersec/minder
Software Supply Chain Security Platform
Apache-2.012 sept 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#software-supply-chain
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
15 registros
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.019 oct 2026 · métricas 2.10.0
PyPI · crates.io · Go +1
in-toto/attestation
in-toto Attestation Framework
Licencia propia21 oct 2026 · métricas 2.10.0
Go
git-pkgs/registries
Go library for fetching package metadata from registry APIs.
MIT19 oct 2026 · métricas 2.10.0
Go
git-pkgs/manifests
A Go library for parsing package manager manifest and lockfiles.
MIT19 sept 2026 · métricas 2.10.0
Go
rezmoss/sbomlyze
Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
Apache-2.012 sept 2026 · métricas 2.10.0
Go
git-pkgs/enrichment
A Go library for fetching package metadata from multiple sources
MIT15 sept 2026 · métricas 2.10.0
Go
git-pkgs/purl
Go library for working with Package URLs (PURLs).
MIT15 sept 2026 · métricas 2.10.0
Go
git-pkgs/vulns
Go library for fetching vulnerability data from multiple sources
MIT15 sept 2026 · métricas 2.10.0
Go
git-pkgs/sigstore
sigstore-go wrapper for verifying attestation bundles against the Sigstore TUF trust root
MIT19 sept 2026 · métricas 2.10.0
Go
in-toto/in-toto-golang
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Licencia propia21 oct 2026 · métricas 2.10.0
npm
Francosimon53/verification-layer
Open-source HIPAA compliance scanner for healthcare code. 140+ rules, 5 HIPAA categories. CLI + CI/CD + VS Code.
MIT16 oct 2026 · métricas 2.10.0
PyPI · npm
HikaruEgashira/pmsec
Zero-config supply-chain hardening.
MIT8 sept 2026 · métricas 2.10.0
PyPI
zrk222/code-factory
Evidence-first audits for AI-generated code: prove tests can fail, catch security and release gaps, and ship reviewable receipts across VS Code, JetBrains, CI, MCP, and App Store workflows.
Licencia propia10 sept 2026 · métricas 2.10.0
Go
open-delivery-spec/cli
Reference CLI tool for Open Delivery Spec — validate and generate delivery artifacts
Apache-2.010 sept 2026 · métricas 2.10.0