Syft
/All repositories
Overview
HEALTH SCORE
Healthy
82out of 100
Solid maintainer coverage and development cadence. Security posture keeps the score from reaching Excellent.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Healthy(82/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 3 days.
Bus factor
32 active maintainers currently have merge rights.
Organization Diversity
Contributors span 641 organizations.
Project Achievements
Leaderboards
About
Syft is a CLI tool and library for generating Software Bill of Materials (SBOM) from container images and filesystems. It provides deep inspection of container images and file systems to generate comprehensive SBOMs that help track software components, dependencies, and potential vulnerabilities.
First commit
Software value
$30M
Tags
containers
cyclonedx
docker
go
golang
hacktoberfest
oci
sbom
spdx
static-analysis
tool
License(s)
Apache-2.0
Links
Data sources
Git
GitHub