guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
A star delta has been computed for 61,707 of 62,640 tracked repositories in this period, and only those can be ranked in it.
A repository missing here has not been measured far enough back yet. That does not mean it did not move.
Star counts measured between 07:57 and 02:27 (BKK).
GUAC aggregates software security metadata into a high fidelity graph database.
in-toto Attestation Framework
Software Supply Chain Security Platform
An open-source dataset of malicious software packages found in the wild.
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
Reference implementation of OpenPubkey
That's all 6 repositories in this period.