Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/in-toto/in-toto-golang

in-toto security software-supply-chain

Score: 31.649794196171705

Last synced: about 9 hours ago
JSON representation

Repository metadata:

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 1 day ago

Total Commits: 779
Total Committers: 41
Avg Commits per committer: 19.0
Development Distribution Score (DDS): 0.739

Commits in past year: 13
Committers in past year: 3
Avg Commits per committer in past year: 4.333
Development Distribution Score (DDS) in past year: 0.231

Name Email Commits
Aditya Saky a****a@s****n 203
dependabot[bot] 4****] 174
Christian Rebischke c****s@s****v 156
Lukas Puehringer l****r@n****u 115
Fredrik Skogman f****n@s****m 29
Santiago Torres s****o@a****g 16
pxp928 p****u@g****m 10
Mikhail Swift m****l@b****m 6
Asra Ali a****a@g****m 6
Pradyumna Krishna g****t@o****n 5
Vaibhav Lodha v****a@1****u 4
Priya Wadhwa p****a@g****m 4
Dan Lorenc d****c@g****m 4
Parth Patel p****h@b****m 3
Vaibhav Lodha v****a@v****e 3
Adam Nauth F****n 3
Batuhan Apaydın b****n@t****m 3
Marcela Melara m****a@i****m 3
Omer Levi Hevroni o****h 3
Billy Lynch b****y@c****v 2
Matthew Suozzo m****o@g****m 2
Scott Buckel b****t@b****m 2
Jake Sanders j****d@g****m 2
Radu M r****t@r****h 2
Luke Hinds l****e@r****m 2
Kevin Holmes k****s@j****m 2
dockercui d****i@a****m 1
co63oc c****c 1
cindykimxp c****0@g****m 1
ayush159 a****3@g****m 1
and 11 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 39
Total pull requests: 340
Average time to close issues: 9 months
Average time to close pull requests: 12 days
Total issue authors: 22
Total pull request authors: 28
Average comments per issue: 3.49
Average comments per pull request: 1.04
Merged pull request: 260
Bot issues: 1
Bot pull requests: 263

Past year issues: 1
Past year pull requests: 11
Past year average time to close issues: N/A
Past year average time to close pull requests: 22 days
Past year issue authors: 1
Past year pull request authors: 6
Past year average comments per issue: 2.0
Past year average comments per pull request: 0.64
Past year merged pull request: 1
Past year bot issues: 0
Past year bot pull requests: 6

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/in-toto/in-toto-golang

Top Issue Authors

  • shibumi (6)
  • adityasaky (5)
  • anotherbridge (3)
  • chuangw6 (3)
  • colek42 (2)
  • laurentsimon (2)
  • viveksahu26 (2)
  • PradyumnaKrishna (2)
  • kanywst (1)
  • 06kellyjac (1)
  • jas4711 (1)
  • lukpueh (1)
  • pxp928 (1)
  • asraa (1)
  • semmet95 (1)

Top Pull Request Authors

  • dependabot[bot] (263)
  • adityasaky (27)
  • shibumi (6)
  • asraa (4)
  • pxp928 (4)
  • developer-guy (3)
  • Forrin (3)
  • msuozzo (2)
  • Yaxhveer (2)
  • DarikshaAnsari (2)
  • co63oc (2)
  • dockercui (2)
  • PradyumnaKrishna (2)
  • wlynch (2)
  • marcelamelara (2)

Top Issue Labels

  • enhancement (21)
  • bug (14)
  • good first issue (8)
  • hacktoberfest (2)
  • dependencies (1)
  • help wanted (1)
  • go (1)

Top Pull Request Labels

  • dependencies (263)
  • go (181)
  • github_actions (82)
  • hacktoberfest (8)
  • hacktoberfest-accepted (8)

Package metadata

proxy.golang.org: github.com/in-toto/in-toto-golang

guix: go-github-com-in-toto-in-toto-golang

Go implementation of the in-toto supply chain framework

ubuntu-24.10: in-toto-golang

  • Homepage: https://github.com/in-toto/in-toto-golang
  • Licenses: other
  • Latest release: 0.9.0+ds-3 (published 9 months ago)
  • Last Synced: 2026-03-08T20:41:12.642Z (8 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
debian-13: in-toto-golang

  • Homepage: https://github.com/in-toto/in-toto-golang
  • Documentation: https://packages.debian.org/trixie/in-toto-golang
  • Licenses: other
  • Latest release: 0.9.0+ds-3 (published 9 months ago)
  • Last Synced: 2026-03-13T22:15:00.210Z (8 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%

Dependencies

.github/workflows/build.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
.github/workflows/ci.yml actions
  • actions/checkout v3 composite
  • golangci/golangci-lint-action v3 composite
.github/workflows/verify-docgen-fmt.yml actions
  • actions/checkout v3 composite
  • actions/setup-go v3 composite
Dockerfile docker
  • gcr.io/distroless/base latest build
  • gcr.io/distroless/base debug build
  • golang ${GO_VERSION}-alpine build
go.mod go
  • github.com/Microsoft/go-winio v0.6.0
  • github.com/cpuguy83/go-md2man/v2 v2.0.2
  • github.com/davecgh/go-spew v1.1.1
  • github.com/golang/protobuf v1.5.2
  • github.com/google/go-cmp v0.5.9
  • github.com/inconshreveable/mousetrap v1.0.1
  • github.com/kr/text v0.2.0
  • github.com/pmezard/go-difflib v1.0.0
  • github.com/russross/blackfriday/v2 v2.1.0
  • github.com/secure-systems-lab/go-securesystemslib v0.5.0
  • github.com/shibumi/go-pathspec v1.3.0
  • github.com/spf13/cobra v1.6.1
  • github.com/spf13/pflag v1.0.5
  • github.com/spiffe/go-spiffe/v2 v2.1.2
  • github.com/stretchr/testify v1.8.1
  • github.com/zeebo/errs v1.3.0
  • golang.org/x/crypto v0.5.0
  • golang.org/x/mod v0.7.0
  • golang.org/x/net v0.7.0
  • golang.org/x/sys v0.5.0
  • golang.org/x/text v0.7.0
  • golang.org/x/tools v0.5.0
  • google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f
  • google.golang.org/grpc v1.53.0
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/square/go-jose.v2 v2.6.0
  • gopkg.in/yaml.v3 v3.0.1
go.sum go
  • 1135 dependencies