Python implementation of OWASP CycloneDX
active 2025-01-29 → 2026-08-08 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 557 days from 2025-01-29 to 2026-08-08. Pushes: 152 total, peak 9 in a day. Pull requests: 124 total, peak 4 in a day. Issues: 39 total, peak 9 in a day. Comments: 202 total, peak 12 in a day. Stars: 10 total, peak 1 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| jkowalleck | 314 | 112 | 45 | 96 |
| dependabot[bot] | 70 | 6 | 54 | 10 |
| Copilot | 21 | 5 | 0 | 11 |
| codacy-production[bot] | 17 | 0 | 0 | 17 |
| saquibsaifee | 12 | 0 | 2 | 7 |
| Churro | 9 | 0 | 4 | 4 |
| OxPirates | 8 | 0 | 1 | 6 |
| github-actions[bot] | 6 | 6 | 0 | 0 |
| wiebe-vandendriessche | 6 | 0 | 1 | 4 |
| indiVar0508 | 6 | 0 | 1 | 4 |
| cyclonedx-releases[bot] | 5 | 5 | 0 | 0 |
| e3krisztian | 5 | 0 | 1 | 3 |
| github-advanced-security[bot] | 5 | 0 | 0 | 3 |
| makew0rld | 5 | 0 | 0 | 4 |
| read-the-docs-community[bot] | 4 | 0 | 0 | 4 |
| gemini-code-assist[bot] | 3 | 0 | 0 | 0 |
| jkugler | 3 | 0 | 1 | 2 |
| woshiwuja | 3 | 0 | 0 | 3 |
| qkaiser | 3 | 0 | 1 | 1 |
| stefan6419846 | 2 | 0 | 1 | 1 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#979jkowalleck2026-07-30 17:58feat(deps)!: make all de/serialization libraries optional
- Pull request#1017dependabot[bot]2026-07-18 19:12
- Issue comment#994read-the-docs-community[bot]2026-06-09 12:48feat: Implement JSF (JSON Signature Format) signature support
- Issue comment#982codacy-production[bot]2026-05-23 19:13chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
- Issue comment#940codacy-production[bot]2026-05-17 21:34feat(validation): improve user-facing schema validation errors
- Pull request#968jkowalleck2026-05-04 12:36
- Issue comment#971codacy-production[bot]2026-04-25 19:14chore(deps): update sphinx-autoapi requirement from <4,>=3 to >=3.6.1,<4
- Issue comment#969jkowalleck2026-04-25 11:26fix: address all zizmor security findings in GitHub Actions workflows
- Issue comment#969jkowalleck2026-04-25 11:21fix: address all zizmor security findings in GitHub Actions workflows
- Issue comment#968jkowalleck2026-04-25 11:19chore: add zizmor workflow to harden GitHub Actions security
- Issue comment#968Copilot2026-04-25 11:06chore: add zizmor workflow to harden GitHub Actions security
- Issue#967jkowalleck2026-04-25 10:46chore: Harden all GitHub Workflows using Zizmor
- Issue comment#908codacy-production[bot]2026-04-15 22:06feat: add support for license expression details
- Issue comment#961codacy-production[bot]2026-04-15 10:44[WIP] Chore: pin GitHub actions to specific commit hashes
- Issue comment#959jkowalleck2026-04-12 11:12feat: add isExternal property to Component for CycloneDX v1.7
- Pull request#959jkowalleck2026-04-12 11:05
- Issue comment#959read-the-docs-community[bot]2026-04-12 08:11feat: add isExternal property to Component for CycloneDX v1.7
- Pull request#959tonal2026-04-12 08:08
- Issue comment#957codacy-production[bot]2026-04-07 10:46chore: a bit of infrastructure housekeeping
- Pull request#954dependabot[bot]2026-03-28 19:12
- Issue comment#951read-the-docs-community[bot]2026-03-24 11:23docs: update CDX summary
- Pull request#946jkowalleck2026-03-13 10:16
- Issue comment#945jkowalleck2026-03-13 09:46feat: make schema deprecation warnings handle-able
- Issue comment#944stefan64198462026-03-13 08:51Deprecation warnings are shown for wrong version
- Pull request#945jkowalleck2026-03-12 22:51
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 10 stars here means stars gained during the window, not the repo's star count.