A Python Rules Engine - Make rule handling simple

Fast and compact maps and sets with Billions of keys for Python, based on finite-state-transducers from the excellent Rust crate fst by Andrew Gallant

A repository of security metrics for continuous certification

Fast, simple named parameters for Rust functions

Golang implementation of a checker for determining if an SPDX ID satisfies an SPDX Expression.

Cross-platform software search

Safe Rust implementation of libmagic

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Code Janitor linguistic review tool

A dependency checker tool from The Linux Foundation

OtterDog is a tool to manage GitHub organizations at scale using a configuration as code approach. It is actively used by the Eclipse Foundation to manage its numerous projects hosted on GitHub.

A .NET library for Open Source Vulnerabilities (OSV) schema and API client.

A portable fork of the high-performance regular expression matching library

BuildStream, the software integration tool

Simple creation of data classes from dictionaries.

Yara rules on PYC files to determine PYC version

Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com

Host an Alpine Linux package repository proxy, but keep old packages

Collect VEX documents and update VEX Hub

The Continuous Clearing Tool scans and collects third-party open-source components used in projects based on NPM, NuGet, Debian, Maven, Python, Conan, Alpine, and Cargo. It then uploads the collect…

Konarr: A free and open source SCA platform for your containers

Konarr Frontend Client

CPAN Security WG website

A library and CLI to work with CSAF and SBOM data

Securing open-source package ecosystems by originating, validating, and augmenting build attestations.