Data

Tools

Indexes

Applications

Experiments

Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 6.7% on proxy.golang.org
Top 5.0% forks on proxy.golang.org

proxy.golang.org : github.com/sigstore/sigstore-go

Go library for Sigstore signing and verification

Registry - Source - Documentation - JSON
purl: pkg:golang/github.com/sigstore/sigstore-go
Keywords: go , golang , sigstore
License: Apache-2.0
Latest release: 5 months ago
First release: over 2 years ago
Namespace: github.com/sigstore
Stars: 82 on GitHub
Forks: 36 on GitHub
Docker dependents: 6
Docker downloads: 233,712
Total Commits: 271
Committers: 13
Average commits per author: 20.846
Development Distribution Score (DDS): 0.672
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: 25 days ago

Low
GSA_kwCzR0hTQS1jcTM4LWpoNWYtMzdtcc4AA_TY
sigstore-go has an unbounded loop over untrusted input can lead to endless data attack
Ecosystems: go
Packages: github.com/sigstore/sigstore-go
Source: github
Published: about 1 year ago