Supply Chain Integrity Working Group
/All repositories
Overview
HEALTH SCORE
Excellent*
Partial score (2/3 categories)
59out of 65
Strong maintainer coverage. Development cadence is the only remaining gap. Security & Supply Chain is unavailable, so weights were redistributed.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Excellent*(59/65)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 1 day.
Bus factor
7 active maintainers currently have merge rights.
Organization Diversity
Contributors span 20 organizations.
Project Achievements
Leaderboards
About
The Supply Chain Integrity Working Group is an initiative focused on improving the security and integrity of software supply chains. It works on developing standards, tools, and best practices to help organizations identify, prevent, and respond to supply chain attacks and vulnerabilities.
First commit
Software value
$140K
License(s)
Apache-2.0
Data sources
Stack Overflow
Git
Hacker News
GitHub