{"payload":{"pageCount":3,"repositories":[{"type":"Public","name":"fuzz-introspector","owner":"ossf","isFork":false,"description":"Fuzz Introspector -- introspect, extend and optimise fuzzers","allTopics":["testing","security","fuzz-testing","vulnerability-analysis","security-research","fuzzing"],"primaryLanguage":{"name":"Python","color":"#3572A5"},"pullRequestCount":4,"issueCount":93,"starsCount":355,"forksCount":54,"license":"Apache License 2.0","participation":[17,16,19,33,15,8,6,2,18,17,0,7,16,7,3,1,1,3,10,10,11,6,18,12,6,3,0,1,1,8,0,4,17,16,20,15,3,8,11,8,15,13,10,3,2,1,2,3,8,4,1,7],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-30T10:46:44.885Z"}},{"type":"Public","name":"wg-best-practices-os-developers","owner":"ossf","isFork":false,"description":"The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.","allTopics":[],"primaryLanguage":{"name":"JavaScript","color":"#f1e05a"},"pullRequestCount":8,"issueCount":36,"starsCount":663,"forksCount":104,"license":"Apache License 2.0","participation":[23,36,17,13,15,2,0,4,15,7,33,5,24,3,10,2,5,2,10,7,8,8,26,3,23,31,26,0,5,0,0,7,12,1,4,0,4,0,6,0,9,132,49,34,9,0,5,4,12,1,13,2],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-30T10:23:31.397Z"}},{"type":"Public","name":"scorecard","owner":"ossf","isFork":false,"description":"OpenSSF Scorecard - Security health metrics for Open Source","allTopics":["scorecard","openssf-scorecard"],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":15,"issueCount":328,"starsCount":4195,"forksCount":450,"license":"Apache License 2.0","participation":[20,25,21,13,7,12,15,26,12,20,11,14,11,11,10,13,11,12,15,11,23,15,11,16,8,9,13,8,5,4,18,17,9,12,11,13,7,2,9,14,7,7,10,8,13,10,10,6,17,14,5,3],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-30T10:20:37.225Z"}},{"type":"Public","name":"alpha-omega","owner":"ossf","isFork":false,"description":"Our mission is to catalyze sustainable improvements to critical open source software projects and ecosystems.","allTopics":["security","opensource","open-source-security"],"primaryLanguage":{"name":"Open Policy Agent","color":"#7d9199"},"pullRequestCount":1,"issueCount":50,"starsCount":70,"forksCount":45,"license":"Apache License 2.0","participation":[19,10,1,9,15,16,7,7,26,5,12,12,25,24,14,0,6,5,9,0,0,25,4,0,0,6,21,0,0,0,3,1,1,0,22,13,1,0,11,15,2,0,1,16,2,0,0,17,10,0,0,1],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-30T05:56:41.948Z"}},{"type":"Public","name":"scorecard-action","owner":"ossf","isFork":false,"description":"Official GitHub Action for OpenSSF Scorecard.","allTopics":["github","security","supply-chain","github-actions","openssf-scorecard"],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":0,"issueCount":26,"starsCount":230,"forksCount":63,"license":"Apache License 2.0","participation":[6,3,2,9,1,4,2,2,2,2,4,1,2,3,7,0,4,1,10,2,4,2,5,2,3,0,3,2,3,3,0,1,3,2,1,2,4,1,1,0,4,2,4,0,1,4,3,0,6,4,0,1],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T20:49:18.953Z"}},{"type":"Public","name":"criticality_score","owner":"ossf","isFork":false,"description":"Gives criticality score for an open source project","allTopics":[],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":30,"issueCount":41,"starsCount":1288,"forksCount":113,"license":"Apache License 2.0","participation":[0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,18,1,5,1,0,0,0,1,1,0,0,0,9,5,0,2,1,5,4,0,0,8,0,0,0,0,10,1,5,1,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T20:02:05.715Z"}},{"type":"Public","name":"wg-securing-critical-projects","owner":"ossf","isFork":false,"description":"Helping allocate resources to secure the critical open source projects we all depend on.","allTopics":[],"primaryLanguage":null,"pullRequestCount":0,"issueCount":21,"starsCount":316,"forksCount":34,"license":"Apache License 2.0","participation":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,2,2,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,0,0,0,2,0,0,0,2,0,0,2,1,3,0,0,0,3],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T19:25:42.085Z"}},{"type":"Public","name":"allstar","owner":"ossf","isFork":false,"description":"GitHub App to set and enforce security policies","allTopics":[],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":6,"issueCount":60,"starsCount":1203,"forksCount":121,"license":"Apache License 2.0","participation":[0,0,0,2,0,0,0,0,1,0,0,0,0,2,0,0,0,0,0,0,0,0,4,1,3,4,0,0,0,0,0,1,0,0,0,0,0,0,4,7,2,1,2,0,0,0,0,0,3,0,0,2],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T19:24:23.048Z"}},{"type":"Public","name":"scorecard-webapp","owner":"ossf","isFork":false,"description":"Website and API for OpenSSF Scorecard","allTopics":["openssf-scorecard"],"primaryLanguage":{"name":"HTML","color":"#e34c26"},"pullRequestCount":6,"issueCount":30,"starsCount":21,"forksCount":26,"license":"Apache License 2.0","participation":[7,9,6,0,3,6,3,2,2,4,3,4,3,1,5,1,4,4,4,3,4,2,5,2,2,5,3,1,6,3,6,2,4,7,1,2,1,3,2,2,2,8,3,3,3,3,4,0,8,0,1,1],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T17:36:48.894Z"}},{"type":"Public","name":"malicious-packages","owner":"ossf","isFork":false,"description":"A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.","allTopics":[],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":11,"issueCount":5,"starsCount":202,"forksCount":16,"license":"Apache License 2.0","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T14:33:55.106Z"}},{"type":"Public","name":"tac","owner":"ossf","isFork":false,"description":"Technical Advisory Council","allTopics":[],"primaryLanguage":null,"pullRequestCount":1,"issueCount":25,"starsCount":103,"forksCount":44,"license":"Other","participation":[7,0,0,0,2,5,1,5,1,0,0,0,4,3,3,2,0,7,4,3,0,2,2,1,27,19,27,3,5,13,14,13,2,2,3,5,8,2,2,51,33,57,9,6,3,0,0,12,3,12,5,10],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T12:05:43.444Z"}},{"type":"Public","name":"osv-schema","owner":"ossf","isFork":false,"description":"Open Source Vulnerability schema. ","allTopics":[],"primaryLanguage":{"name":"Python","color":"#3572A5"},"pullRequestCount":13,"issueCount":33,"starsCount":170,"forksCount":68,"license":"Apache License 2.0","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-29T07:09:50.611Z"}},{"type":"Public","name":"package-feeds","owner":"ossf","isFork":false,"description":"Feed parsing for language package manager updates","allTopics":[],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":12,"issueCount":21,"starsCount":70,"forksCount":24,"license":"Apache License 2.0","participation":[2,1,5,5,1,0,0,2,0,0,0,1,0,0,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0,0,0,0,4,0,0,1,0,1,2,0,0,15,3,0,0,0,1,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-28T14:22:59.763Z"}},{"type":"Public","name":"toolbelt","owner":"ossf","isFork":false,"description":"","allTopics":[],"primaryLanguage":null,"pullRequestCount":2,"issueCount":4,"starsCount":16,"forksCount":4,"license":"Apache License 2.0","participation":[0,0,0,0,0,0,0,0,0,0,0,24,2,0,0,0,0,6,4,0,0,0,14,1,8,20,17,0,0,0,0,3,1,0,0,3,2,0,0,0,2,0,0,1,0,0,0,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-28T13:50:09.910Z"}},{"type":"Public","name":"disclosure-check","owner":"ossf","isFork":false,"description":"disclosure-check","allTopics":[],"primaryLanguage":{"name":"Python","color":"#3572A5"},"pullRequestCount":13,"issueCount":2,"starsCount":2,"forksCount":0,"license":"Apache License 2.0","participation":[5,6,9,4,1,0,2,2,15,1,0,0,0,0,2,0,0,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,11,2,14,0,0,0,0,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-27T18:34:39.292Z"}},{"type":"Public","name":"sbom-everywhere","owner":"ossf","isFork":false,"description":"Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption","allTopics":[],"primaryLanguage":{"name":"Vue","color":"#41b883"},"pullRequestCount":2,"issueCount":19,"starsCount":58,"forksCount":21,"license":"Apache License 2.0","participation":[2,0,0,0,0,0,1,6,1,0,2,0,0,0,0,0,0,0,0,0,0,0,0,0,4,0,0,0,0,0,0,1,0,0,2,5,0,3,0,0,2,0,0,0,0,0,3,1,0,0,8,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-27T17:35:59.212Z"}},{"type":"Public","name":"security-insights-spec","owner":"ossf","isFork":false,"description":"OPENSSF SECURITY INSIGHTS: Repository for development of the draft standard, where requests for modification should be made via Github Issues.","allTopics":[],"primaryLanguage":null,"pullRequestCount":4,"issueCount":8,"starsCount":45,"forksCount":8,"license":"Other","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-24T18:31:00.673Z"}},{"type":"Public","name":"s2c2f","owner":"ossf","isFork":false,"description":"The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow. ","allTopics":[],"primaryLanguage":null,"pullRequestCount":2,"issueCount":9,"starsCount":157,"forksCount":22,"license":"Other","participation":[0,0,1,8,1,2,3,0,0,4,0,0,7,4,0,0,0,0,0,1,1,0,0,0,0,1,0,0,0,0,0,0,2,4,2,2,0,3,1,0,1,0,3,0,5,1,2,0,1,1,0,1],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-24T10:29:59.608Z"}},{"type":"Public","name":"package-analysis","owner":"ossf","isFork":false,"description":"Open Source Package Analysis","allTopics":[],"primaryLanguage":{"name":"Go","color":"#00ADD8"},"pullRequestCount":10,"issueCount":56,"starsCount":711,"forksCount":50,"license":"Apache License 2.0","participation":[10,12,10,10,3,6,2,1,5,9,4,3,14,9,18,8,6,2,4,13,9,9,8,7,8,0,0,1,6,1,1,1,2,1,0,7,5,4,1,6,1,3,0,2,2,0,0,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-22T07:23:35.653Z"}},{"type":"Public","name":"si-tooling","owner":"ossf","isFork":false,"description":"","allTopics":[],"primaryLanguage":{"name":"Python","color":"#3572A5"},"pullRequestCount":1,"issueCount":0,"starsCount":1,"forksCount":1,"license":"Apache License 2.0","participation":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,2,0,0,0,0,0,0,0,0,3,0,0,0,0,1,2,2,5,2,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-21T07:34:54.327Z"}},{"type":"Public","name":"S2C2F-attestation-schema-and-tool","owner":"ossf","isFork":false,"description":"Secure Supply Chain Consumption Framework (S2C2F) OSCAL Catalog and tool","allTopics":["oscal","s2c2f","software-transparency"],"primaryLanguage":{"name":"Python","color":"#3572A5"},"pullRequestCount":1,"issueCount":7,"starsCount":3,"forksCount":1,"license":"MIT License","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-21T06:21:28.445Z"}},{"type":"Public","name":"secure-sw-dev-fundamentals","owner":"ossf","isFork":false,"description":"Secure Software Development Fundamentals courses (from the OpenSSF Best Practices WG)","allTopics":[],"primaryLanguage":{"name":"CSS","color":"#563d7c"},"pullRequestCount":2,"issueCount":31,"starsCount":160,"forksCount":45,"license":"Creative Commons Attribution 4.0 International","participation":[0,0,0,3,0,5,7,3,0,0,3,8,4,0,0,0,0,0,1,3,0,0,0,0,0,1,0,0,0,0,0,1,3,0,0,0,0,1,0,0,0,0,0,0,3,0,0,9,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-20T18:06:09.838Z"}},{"type":"Public","name":".github","owner":"ossf","isFork":false,"description":"Github configuration","allTopics":[],"primaryLanguage":null,"pullRequestCount":0,"issueCount":0,"starsCount":1,"forksCount":1,"license":null,"participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-20T16:32:32.481Z"}},{"type":"Public","name":"ossf-landscape","owner":"ossf","isFork":false,"description":"","allTopics":[],"primaryLanguage":null,"pullRequestCount":1,"issueCount":1,"starsCount":26,"forksCount":28,"license":"Apache License 2.0","participation":[3,2,5,0,4,3,1,1,1,5,2,1,1,2,8,3,5,1,2,3,2,1,2,4,3,0,3,2,0,1,4,1,1,0,0,0,1,0,0,3,1,1,1,2,0,1,1,1,2,4,1,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-18T02:04:07.750Z"}},{"type":"Public","name":"Memory-Safety","owner":"ossf","isFork":false,"description":"","allTopics":[],"primaryLanguage":null,"pullRequestCount":1,"issueCount":4,"starsCount":12,"forksCount":10,"license":"Apache License 2.0","participation":[0,1,0,4,0,2,4,3,0,2,3,0,0,1,1,0,0,2,0,0,0,0,1,0,0,2,0,2,6,0,0,0,1,0,1,3,0,4,1,0,0,0,0,2,2,0,1,3,1,4,3,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-17T17:13:58.432Z"}},{"type":"Public","name":"wg-security-tooling","owner":"ossf","isFork":false,"description":"OpenSSF Security Tooling Working Group","allTopics":[],"primaryLanguage":null,"pullRequestCount":0,"issueCount":15,"starsCount":293,"forksCount":52,"license":"Apache License 2.0","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-17T00:59:02.195Z"}},{"type":"Public","name":"wg-vulnerability-disclosures","owner":"ossf","isFork":false,"description":"The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.","allTopics":[],"primaryLanguage":null,"pullRequestCount":0,"issueCount":23,"starsCount":170,"forksCount":40,"license":"Apache License 2.0","participation":null,"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-15T15:44:11.107Z"}},{"type":"Public","name":"oss-vulnerability-guide","owner":"ossf","isFork":true,"description":"A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.","allTopics":[],"primaryLanguage":null,"pullRequestCount":1,"issueCount":4,"starsCount":113,"forksCount":45,"license":"Creative Commons Attribution 4.0 International","participation":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-08T07:57:12.343Z"}},{"type":"Public","name":"DevRel-community","owner":"ossf","isFork":false,"description":"Evangelizing the mission and work of the OpenSSF and building strong community outreach around end-users, open-source maintainers, and contributors.","allTopics":[],"primaryLanguage":null,"pullRequestCount":0,"issueCount":18,"starsCount":17,"forksCount":3,"license":"Creative Commons Zero v1.0 Universal","participation":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,5,6,1,3,8,2,0,0,0,2,0,0,0,5,0,1,1,5,3,0,0,0,0,0,0,2,6,1,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-05-02T16:20:04.834Z"}},{"type":"Public","name":"wg-metrics-and-metadata","owner":"ossf","isFork":false,"description":"The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed confidence in the security of open source projects. We do this by collecting, curating, and communicating relevant metrics and metadata from open source projects and the ecosystems of which they are a part.","allTopics":[],"primaryLanguage":null,"pullRequestCount":2,"issueCount":14,"starsCount":221,"forksCount":42,"license":"Apache License 2.0","participation":[0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,3,0,0,1,0,0,0,0,0,2,0,0,0,0,0,0,2,3,0,0,0,0,3,0,0,2,0,0,0,0,0,1,0,0,0,0,0],"lastUpdated":{"hasBeenPushedTo":true,"timestamp":"2024-04-23T19:11:44.882Z"}}],"repositoryCount":61,"userInfo":null,"searchable":true,"definitions":[],"typeFilters":[{"id":"all","text":"All"},{"id":"public","text":"Public"},{"id":"source","text":"Sources"},{"id":"fork","text":"Forks"},{"id":"archived","text":"Archived"},{"id":"template","text":"Templates"}],"compactMode":false},"title":"Repositories"}