Go · npm
mindersec/minder
Software Supply Chain Security Platform
Apache-2.0Sep 12, 2026 · metrics 2.10.0
All tags
Catalogue tag
#software-supply-chain
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
15 records
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI · crates.io · Go +1
in-toto/attestation
in-toto Attestation Framework
Custom licenseOct 21, 2026 · metrics 2.10.0
Go
git-pkgs/registries
Go library for fetching package metadata from registry APIs.
MITOct 19, 2026 · metrics 2.10.0
Go
git-pkgs/manifests
A Go library for parsing package manager manifest and lockfiles.
MITSep 19, 2026 · metrics 2.10.0
Go
rezmoss/sbomlyze
Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
git-pkgs/enrichment
A Go library for fetching package metadata from multiple sources
MITSep 15, 2026 · metrics 2.10.0
Go
git-pkgs/purl
Go library for working with Package URLs (PURLs).
MITSep 15, 2026 · metrics 2.10.0
Go
git-pkgs/vulns
Go library for fetching vulnerability data from multiple sources
MITSep 15, 2026 · metrics 2.10.0
Go
git-pkgs/sigstore
sigstore-go wrapper for verifying attestation bundles against the Sigstore TUF trust root
MITSep 19, 2026 · metrics 2.10.0
Go
in-toto/in-toto-golang
A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
Custom licenseOct 21, 2026 · metrics 2.10.0
npm
Francosimon53/verification-layer
Open-source HIPAA compliance scanner for healthcare code. 140+ rules, 5 HIPAA categories. CLI + CI/CD + VS Code.
MITOct 16, 2026 · metrics 2.10.0
PyPI · npm
HikaruEgashira/pmsec
Zero-config supply-chain hardening.
MITSep 8, 2026 · metrics 2.10.0
PyPI
zrk222/code-factory
Evidence-first audits for AI-generated code: prove tests can fail, catch security and release gaps, and ship reviewable receipts across VS Code, JetBrains, CI, MCP, and App Store workflows.
Custom licenseSep 10, 2026 · metrics 2.10.0
Go
open-delivery-spec/cli
Reference CLI tool for Open Delivery Spec — validate and generate delivery artifacts
Apache-2.0Sep 10, 2026 · metrics 2.10.0