guacsec/guac
GoApache-2.0active
Health
GUAC aggregates software security metadata into a high fidelity graph database.
Health Breakdown
Activity25
Community25
Maintenance13
Popularity25
#attestations#cyclonedx#cyclonedx-sbom#graph#in-toto#sbom#security#slsa#software-supply-chain#software-supply-chain-security#spdx#spdx-sbom#supply-chain#supply-chain-analytics#supply-chain-security#supply-chain-visibility#vex#vulnerability#vulnerability-management
Should you contribute to guacsec/guac?
guacsec/guac has a FoundDev health score of 88/100, which puts it in the active-and-maintained tier. The maintainer team is shipping recently, issues are being closed, and a PR you open this week has a realistic chance of being reviewed.
Last push was 0 days ago — that signals an actively maintained project. New issues are likely to get a maintainer response within days. The project is written primarily in Go, so prior Go experience will shorten ramp-up.
Licensed under Apache-2.0, a standard OSI-approved license — safe to contribute to under normal employer IP policies.
Community
GoApache 2.0
active
0d ago
