Back to Topics Directory
Topic Hub

#supply-chain (25 Repositories)

Ranked open-source repositories tagged with #supply-chain, scored by pull request acceptance likelihood and maintainer engagement velocity.

Topic Avg Merge Rate

56.6%

Avg Review Latency

37.5h

Filter by language

25 repositories tagged #supply-chain

A TierRust 109

phylum-dev/cli

Command line interface for the Phylum API

100.0%
Merge Rate
<1h
First Review
100%
1st-Timers
3
Maintainers
A TierRuby 1.4k

ossf/best-practices-badge

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

96.3%
Merge Rate
6d
First Review
100%
1st-Timers
2
Maintainers
A TierGo 1.6k 2 GFIs

guacsec/guac

GUAC aggregates software security metadata into a high fidelity graph database.

63.0%
Merge Rate
14h
First Review
80%
1st-Timers
9
Maintainers
A TierGo 422 5 GFIs

mindersec/minder

Software Supply Chain Security Platform

70.8%
Merge Rate
1d
First Review
45%
1st-Timers
11
Maintainers
A TierJava 128

relizaio/rearm

ReARM - Release Governance Platform

84.3%
Merge Rate
-
First Review
67%
1st-Timers
2
Maintainers
B TierGo 538

sigstore/sigstore

Common go library shared across sigstore services and clients

77.8%
Merge Rate
15h
First Review
50%
1st-Timers
10
Maintainers
A TierGo 209

openvex/vexctl

A tool to create, transform and attest VEX metadata

80.0%
Merge Rate
<1h
First Review
100%
1st-Timers
2
Maintainers
A TierGo 1.2k

sigstore/rekor

Software Supply Chain Transparency Log

74.5%
Merge Rate
2d
First Review
100%
1st-Timers
7
Maintainers
A TierJavaScript 1.1k

endojs/endo

Endo is a distributed secure JavaScript sandbox, based on SES

67.4%
Merge Rate
2d
First Review
71%
1st-Timers
12
Maintainers
B TierRust 431

kpcyrd/rebuilderd

Independent verification of binary packages - Reproducible Builds

83.3%
Merge Rate
<1h
First Review
100%
1st-Timers
1
Maintainers
B TierJavaScript 213

nsacyber/HIRS

Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber

53.3%
Merge Rate
1d
First Review
75%
1st-Timers
3
Maintainers
B TierPython 334

sigstore/sigstore-python

A Sigstore client written in Python

20.0%
Merge Rate
14h
First Review
33%
1st-Timers
9
Maintainers
B TierPython 108

liyuqin606-del/packrehearsal

Turn npm, Python, and Rust release evidence into bounded Codex maintenance tasks.

100.0%
Merge Rate
-
First Review
100%
1st-Timers
0
Maintainers
B TierGo 188

projectdiscovery/depx

Malicious package & supply-chain intelligence

45.5%
Merge Rate
<1h
First Review
100%
1st-Timers
1
Maintainers
B TierRust 289

cackle-rs/cackle

A code ACL checker for Rust

78.6%
Merge Rate
15h
First Review
100%
1st-Timers
1
Maintainers
B TierGo 713

theupdateframework/go-tuf

Go implementation of The Update Framework (TUF)

55.2%
Merge Rate
10d
First Review
25%
1st-Timers
14
Maintainers
B TierJava 202

fosslight/fosslight

FOSSLight Hub : Integrated management web-service for Open Source Compliance Process

57.1%
Merge Rate
-
First Review
100%
1st-Timers
1
Maintainers
B TierGo 545

in-toto/witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

85.7%
Merge Rate
7d
First Review
100%
1st-Timers
2
Maintainers
B TierGo 186

stacklok/frizbee

Throw a tag at it and it comes back with a checksum.

21.3%
Merge Rate
8d
First Review
50%
1st-Timers
1
Maintainers
B TierPython 489

fadewalk/serenity-stock-choke

A股/港股/美股 卡脖子选股 Skill,基于 Serenity 供应链瓶颈理论 | Claude Code / Codex 通用智能体可用,零依赖

100.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierPython 4.1k

muxuuu/serenity-skill

Serenity-inspired Agent Skill for supply-chain bottleneck stock research

0.0%
Merge Rate
<1h
First Review
0%
1st-Timers
1
Maintainers
D TierJavaScript 473

sandworm-hq/sandworm-audit

Security & License Compliance For Your App's Dependencies 🪱

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierPOPowerShell 731

JulietMirambo/Units_of_Measure_Harmonization-intelligence-platform

Production-Grade ML System for Automated Unit of Measure Error Detection | 88-92% Accuracy | 94% Autonomy | KNIME Workflow

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierPython 150

samirsaci/picking-route

Improve Warehouse Productivity using Order Batching

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers
D TierJavaScript 331

KevinFasusi/supplychainpy

Supplychainpy is a Python library for supply chain analysis, modelling and simulation. The library assists a workflow that is reliant on Excel and VBA.

0.0%
Merge Rate
-
First Review
0%
1st-Timers
0
Maintainers