Vulnerability Disclosures Working Group
/All repositories
Overview
HEALTH SCORE
Healthy
82out of 100
Solid development cadence and security posture. Maintainer coverage keeps the score from reaching Excellent.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Healthy(82/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 15 days, but most repositories have response times over 90 days.
Bus factor
14 active maintainers currently have merge rights.
Organization Diversity
Contributors span 56 organizations.
Archived repositories are excluded from Health Score.
Project Achievements
Leaderboards
About
The Vulnerability Disclosures Working Group is an initiative by the Open Source Security Foundation (OSSF) focused on establishing best practices, standards, and coordination mechanisms for responsible vulnerability disclosure in open source software. The working group aims to improve communication between security researchers, maintainers, and users regarding the discovery and handling of security vulnerabilities.
First commit
Software value
$2.4M
Tags
vulnerability disclosure
security coordination
open source security
responsible disclosure
security best practices
License(s)
Apache-2.0
Links
Data sources
Groups.io
Stack Overflow
GitHub
Git
Hacker News