Protobom
/All repositories
Overview
HEALTH SCORE
Fair
61out of 100
Security posture drags the score down. Development cadence and maintainer coverage help keep it from falling further.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Fair(61/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 95 days, but most repositories have response times over 90 days.
Bus factor
3 active maintainers currently have merge rights.
Organization Diversity
Contributors span 30 organizations.
Project Achievements
Leaderboards
About
protobom is a protocol buffers representation of SBOM data able to ingest documents in modern SPDX and CycloneDX versions without loss. It has an accompanying Go library generated from the protocol buffers definiton that also implements ingesters for those formats.
First commit
Software value
$22M
Maturity
Active
License(s)
CC0-1.0
Apache-2.0
Links
Data sources
Git
GitHub
Hacker News