ThreatMapper
/All repositories
Overview
HEALTH SCORE
Concerning*
Partial score (2/3 categories)
31out of 65
Maintainer coverage is the lead risk. Development cadence is present but not enough to offset the structural risk. Security & Supply Chain is unavailable, so weights were redistributed.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Concerning*(31/65)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 9 days.
Bus factor
Only 1 active maintainer currently has merge rights.
Organization Diversity
Contributors span 30 organizations.
Project Achievements
Leaderboards
About
ThreatMapper is an open-source cloud native security observability platform that scans, maps, and ranks vulnerabilities in running containers, images, hosts and repositories. It provides runtime analysis, threat detection, and attack path visualization across cloud native production platforms.
First commit
Software value
$15M
Tags
cloud-native
cloudsecurity
cnapp
compliance
containers
cspm
cwpp
devops
devsecops
hacktoberfest
kubernetes
observability
registry-scanning
scanning-tool
secops
security-tools
threat-analysis
vulnerability-detection
vulnerability-management
vulnerability-scanners
License(s)
Apache-2.0
Data sources
Git
GitHub