https://github.com/openvex/go-vex
Score: 25.49734518738038
Last synced: about 7 hours ago
JSON representation
Repository metadata:
Go module to generate and transform VEX documents
- Host: GitHub
- URL: https://github.com/openvex/go-vex
- Owner: openvex
- License: apache-2.0
- Created: 2023-01-10T00:36:01.000Z (almost 4 years ago)
- Default Branch: main
- Last Pushed: 2026-10-30T23:07:18.000Z (4 days ago)
- Last Synced: 2026-10-31T19:07:39.513Z (3 days ago)
- Language: Go
- Homepage:
- Size: 1.88 MB
- Stars: 72
- Watchers: 5
- Forks: 26
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY-INSIGHTS.yml
- Maintainers: MAINTAINERS.md
Owner metadata:
- Name: OpenVEX
- Login: openvex
- Email:
- Kind: organization
- Description: A simplified Vulnerability Exploitability eXchange implementation
- Website: https://openvex.dev
- Location:
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/121361164?v=4
- Repositories: 11
- Last Synced at: 2026-10-30T13:07:29.821Z
- Profile URL: https://github.com/openvex
GitHub Events
Total
- Create event: 61
- Delete event: 52
- Fork event: 2
- Issue comment event: 17
- Issues event: 5
- Pull request event: 172
- Pull request review comment event: 9
- Pull request review event: 50
- Push event: 82
- Watch event: 10
- Total: 460
Last Year
- Create event: 30
- Delete event: 21
- Issue comment event: 5
- Issues event: 1
- Pull request event: 87
- Pull request review event: 8
- Push event: 35
- Watch event: 2
- Total: 189
Committers metadata
Last synced: 1 day ago
Total Commits: 409
Total Committers: 24
Avg Commits per committer: 17.042
Development Distribution Score (DDS): 0.572
Commits in past year: 102
Committers in past year: 8
Avg Commits per committer in past year: 12.75
Development Distribution Score (DDS) in past year: 0.353
| Name | Commits | |
|---|---|---|
| dependabot[bot] | 4****] | 175 |
| Adolfo García Veytia (Puerco) | p****o@c****v | 157 |
| cpanato | c****u@g****m | 23 |
| Dan Luhring | d****g@c****v | 15 |
| Arpit Jain | a****9@g****m | 4 |
| Kent 'picat' Gruber | k****r@g****m | 4 |
| Ulf Lilleengen | l****f@r****m | 3 |
| Christian Zunker | c****r@g****m | 3 |
| Travis Truman | t****t@g****m | 3 |
| knqyf263 | k****3@g****m | 3 |
| Micah Hausler | h****m@g****m | 3 |
| Sam Sanders | h****o@s****v | 2 |
| crozzy | j****d@g****m | 2 |
| Ajay Kemparaj | a****j@g****m | 2 |
| Adrian Mouat | a****n@c****v | 1 |
| Ben | b****n@a****o | 1 |
| Brandon Lum | l****b@g****m | 1 |
| Eljees | 3****l@g****m | 1 |
| Johann Gyger | j****n@g****e | 1 |
| MaineK00n | m****9@g****m | 1 |
| Sascha Grunert | s****t@r****m | 1 |
| Tejas Bharambe | t****e@o****m | 1 |
| mrizzi | m****i@r****m | 1 |
| paulinayanez | p****z | 1 |
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 9
Total pull requests: 118
Average time to close issues: about 23 hours
Average time to close pull requests: 9 days
Total issue authors: 8
Total pull request authors: 15
Average comments per issue: 1.11
Average comments per pull request: 0.52
Merged pull request: 87
Bot issues: 1
Bot pull requests: 75
Past year issues: 1
Past year pull requests: 16
Past year average time to close issues: N/A
Past year average time to close pull requests: 5 days
Past year issue authors: 1
Past year pull request authors: 4
Past year average comments per issue: 0.0
Past year average comments per pull request: 1.25
Past year merged pull request: 9
Past year bot issues: 0
Past year bot pull requests: 9
Top Issue Authors
- picatz (2)
- RamXX (1)
- knqyf263 (1)
- dependabot[bot] (1)
- puerco (1)
- sevansdell (1)
- lars18th (1)
- bpfoster (1)
Top Pull Request Authors
- dependabot[bot] (75)
- puerco (15)
- cpanato (6)
- arpitjain099 (5)
- luhring (4)
- picatz (2)
- trumant (2)
- lulf (2)
- czunker (1)
- Eljees (1)
- slashben (1)
- crozzy (1)
- lumjjb (1)
- paulinayanez (1)
- bharambetejas (1)
Top Issue Labels
- github_actions (1)
- v1 (1)
- enhancement (1)
- bug (1)
- dependencies (1)
- go (1)
Top Pull Request Labels
- dependencies (63)
- github_actions (55)
- lgtm (10)
- approved (10)
- go (8)
- bug (1)
- enhancement (1)
Package metadata
- Total packages: 3
- Total downloads: unknown
- Total docker downloads: 64,069,835
- Total dependent packages: 2 (may contain duplicates)
- Total dependent repositories: 6 (may contain duplicates)
- Total versions: 22
proxy.golang.org: github.com/openvex/go-vex/pkg/vex
- Homepage: https://github.com/openvex/go-vex
- Documentation: https://pkg.go.dev/github.com/openvex/go-vex/pkg/vex#section-documentation
- Licenses: Apache-2.0
- Latest release: v0.2.9 (published about 2 months ago)
- Last Synced: 2026-11-02T01:13:11.306Z (1 day ago)
- Versions: 7
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/openvex/go-vex/pkg/csaf
Package csaf provides a library for Common Security Advisory Framework Version 2.0 (CSAF) documents.
- Homepage: https://github.com/openvex/go-vex
- Documentation: https://pkg.go.dev/github.com/openvex/go-vex/pkg/csaf#section-documentation
- Licenses: Apache-2.0
- Latest release: v0.2.9 (published about 2 months ago)
- Last Synced: 2026-11-02T01:05:36.102Z (1 day ago)
- Versions: 7
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 4.751%
- Average: 4.91%
- Dependent repos count: 5.07%
proxy.golang.org: github.com/openvex/go-vex
- Homepage: https://github.com/openvex/go-vex
- Documentation: https://pkg.go.dev/github.com/openvex/go-vex#section-documentation
- Licenses: Apache-2.0
- Latest release: v0.2.9 (published about 2 months ago)
- Last Synced: 2026-11-02T01:09:24.652Z (1 day ago)
- Versions: 8
- Dependent Packages: 2
- Dependent Repositories: 6
- Docker Downloads: 64,069,835
-
Rankings:
- Docker downloads count: 1.36%
- Dependent repos count: 2.118%
- Dependent packages count: 3.672%
- Average: 5.062%
- Forks count: 8.21%
- Stargazers count: 9.953%
Dependencies
.github/workflows/boilerplate.yaml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- chainguard-dev/actions/boilerplate main composite
.github/workflows/ci-build-test.yaml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
.github/workflows/verify.yaml
actions
- actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
- actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
- golangci/golangci-lint-action 08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 composite
go.mod
go
- github.com/davecgh/go-spew v1.1.1
- github.com/google/go-cmp v0.5.9
- github.com/in-toto/in-toto-golang v0.3.4-0.20220709202702-fa494aaa0add
- github.com/kr/pretty v0.3.0
- github.com/owenrumney/go-sarif v1.1.1
- github.com/pmezard/go-difflib v1.0.0
- github.com/rogpeppe/go-internal v1.9.0
- github.com/secure-systems-lab/go-securesystemslib v0.4.0
- github.com/shibumi/go-pathspec v1.3.0
- github.com/sirupsen/logrus v1.9.0
- github.com/stretchr/testify v1.8.1
- github.com/zclconf/go-cty v1.10.0
- golang.org/x/crypto v0.4.0
- golang.org/x/sys v0.3.0
- golang.org/x/text v0.5.0
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/yaml.v3 v3.0.1
go.sum
go
- github.com/apparentlymart/go-textseg/v13 v13.0.0
- github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
- github.com/creack/pty v1.1.9
- github.com/davecgh/go-spew v1.1.1
- github.com/davecgh/go-spew v1.1.0
- github.com/golang/protobuf v1.3.4
- github.com/golang/protobuf v1.3.1
- github.com/google/go-cmp v0.3.1
- github.com/google/go-cmp v0.5.9
- github.com/in-toto/in-toto-golang v0.3.4-0.20220709202702-fa494aaa0add
- github.com/kr/pretty v0.2.1
- github.com/kr/pretty v0.3.0
- github.com/kr/pretty v0.1.0
- github.com/kr/pty v1.1.1
- github.com/kr/text v0.2.0
- github.com/kr/text v0.1.0
- github.com/owenrumney/go-sarif v1.1.1
- github.com/pmezard/go-difflib v1.0.0
- github.com/rogpeppe/go-internal v1.9.0
- github.com/rogpeppe/go-internal v1.6.1
- github.com/secure-systems-lab/go-securesystemslib v0.4.0
- github.com/shibumi/go-pathspec v1.3.0
- github.com/sirupsen/logrus v1.9.0
- github.com/stretchr/objx v0.1.0
- github.com/stretchr/objx v0.5.0
- github.com/stretchr/objx v0.4.0
- github.com/stretchr/testify v1.7.1
- github.com/stretchr/testify v1.7.0
- github.com/stretchr/testify v1.8.1
- github.com/stretchr/testify v1.8.0
- github.com/vmihailenco/msgpack/v4 v4.3.12
- github.com/vmihailenco/tagparser v0.1.1
- github.com/zclconf/go-cty v1.10.0
- golang.org/x/crypto v0.4.0
- golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
- golang.org/x/net v0.0.0-20200301022130-244492dfa37a
- golang.org/x/net v0.0.0-20190603091049-60506f45cf65
- golang.org/x/sys v0.3.0
- golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8
- golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a
- golang.org/x/term v0.3.0
- golang.org/x/text v0.3.2
- golang.org/x/text v0.3.5
- golang.org/x/text v0.5.0
- golang.org/x/text v0.3.0
- golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e
- google.golang.org/appengine v1.6.5
- gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
- gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
- gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127
- gopkg.in/errgo.v2 v2.1.0
- gopkg.in/yaml.v3 v3.0.1
- gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c
.github/workflows/release.yaml
actions
- puerco/release-actions/publish-release 9975072608f4adfb73144e8fc76603a6910f365e composite
- puerco/release-actions/setup-publish-release 9975072608f4adfb73144e8fc76603a6910f365e composite
.github/workflows/compliance.yaml
actions
- actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
- actions/setup-go b7ad1dad31e06c5925ef5d2fc7ad053ef454303e composite
- actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
- carabiner-dev/actions/_demo/scorecard 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/ampel/verify 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/install/beaker 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/install/bnd 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/install/snappy 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/install/unpack 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- carabiner-dev/actions/install/vexflow 36a39ef667efe7112df8b1a534a4e37f35fad6fd composite
- google/osv-scanner-action/osv-scanner-action 9a498708959aeaef5ef730655706c5a1df1edbc2 composite
- kubernetes-sigs/release-actions/setup-tejolote c130b4494862d330a1aa4de320076c666d0708da composite
.github/workflows/compute_slsa_source.yaml
actions