Ratify
/All repositories
Overview
HEALTH SCORE
Concerning
40out of 100
Maintainer coverage is the lead risk. Security posture and development cadence are present but not enough to offset the structural risk.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Concerning(40/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
No PRs or issues were opened in the review window, so response time could not be measured.
Bus factor
3 active maintainers currently have merge rights.
Organization Diversity
Contributors come from 2 organizations only.
Project Achievements
LeaderboardsAbout
A verification engine on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies you create.
First commit
Software value
$4.4M
Maturity
Sandbox
Tags
artifact
cli
go
ratify
verification
kubernetes
secure-supply-chain
containerd
License(s)
Apache-2.0
MIT
Data sources
Git
GitHub