anchore/syft
GoApache-2.0activebeginner-friendlypopular
Health
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Health Breakdown
Activity25
Community25
Maintenance12
Popularity25
Should you contribute to anchore/syft?
anchore/syft has a FoundDev health score of 87/100, which puts it in the active-and-maintained tier. The maintainer team is shipping recently, issues are being closed, and a PR you open this week has a realistic chance of being reviewed.
Last push was 0 days ago — that signals an actively maintained project. New issues are likely to get a maintainer response within days. The project is written primarily in Go, so prior Go experience will shorten ramp-up.
Licensed under Apache-2.0, a standard OSI-approved license — safe to contribute to under normal employer IP policies.
Community
GoApache 2.0
activebeginner-friendlypopular
0d ago
