chainloop-dev/chainloop
GoApache-2.0active
Health
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Health Breakdown
Activity25
Community25
Maintenance13
Popularity25
#attestation#compliance#cyclonedx#devsecops#in-toto#license#metadata-platform#open-source-licensing#ospo#oss-compliance#regulated-industry#sbom#sbom-discovery#sbom-distribution#security#slsa#slsa-provenance#spdx#supply-chain-security
Should you contribute to chainloop-dev/chainloop?
chainloop-dev/chainloop has a FoundDev health score of 88/100, which puts it in the active-and-maintained tier. The maintainer team is shipping recently, issues are being closed, and a PR you open this week has a realistic chance of being reviewed.
Last push was 0 days ago — that signals an actively maintained project. New issues are likely to get a maintainer response within days. The project is written primarily in Go, so prior Go experience will shorten ramp-up.
Licensed under Apache-2.0, a standard OSI-approved license — safe to contribute to under normal employer IP policies.
Community
GoApache 2.0
active
0d ago
