Skip to content

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

active 2024-12-262026-05-27 (UTC)

Partial coverage12,634 / 14,356 hourly files (88%) · 2 absent upstream · 1,716 failed, retryable2024-12-202026-08-11 (UTC)— sampled evenly across the window, so rankings and trends hold; absolute counts scale up.
Events
122
Pushes
12
Pull requests
12
Issues
13
Stars
62
Forks
6

Activity over time

Daily event counts in the loaded window

Line chart, 518 days from 2024-12-26 to 2026-05-27. Pushes: 12 total, peak 2 in a day. Pull requests: 12 total, peak 4 in a day. Issues: 13 total, peak 3 in a day. Comments: 8 total, peak 3 in a day. Stars: 62 total, peak 2 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
cyberchen1995281164
mcandre3000
luotianqi7773030
dogfi2000
damoasis2010
NiceAsiv2001
szmcdull1001
cargoedit1001
cheechang1000
moveyield1001
start-cat1000

Recent activity

Latest issues, pull requests and releases

  • Issue#345dogfi2026-05-27 01:21
    关于maven与npm管理检测组件的技术问题
  • Issue#345dogfi2026-05-27 01:21
    关于maven与npm管理检测组件的技术问题
  • Issue#342cyberchen19952026-05-15 08:11
    Bug: Failed to fetch vulnerabilities from OpenSCA server (code 500003)
  • Issue comment#336moveyield2026-02-24 06:26
    refactor: use reflect.TypeFor
  • Issue comment#328cyberchen19952026-01-21 09:59
    [Feature request] zeroconf
  • Issue#332cyberchen19952026-01-21 09:52
    许可证检测也需要依赖漏洞库吗
  • Pull request#331damoasis2025-12-26 01:48
  • Issue#329mcandre2025-11-21 18:39
    [Feature request] TOML
  • Issue#327mcandre2025-11-21 18:35
    [Feature request] console output
  • Issue#327mcandre2025-11-21 18:35
    [Feature request] console output
  • Issue#324cyberchen19952025-11-19 08:19
    关于云漏洞库服务的问题
  • Issue#324cheechang2025-11-05 06:54
    关于云漏洞库服务的问题
  • Issue comment#323szmcdull2025-10-21 02:04
    [Bug] Go大量误报,应以go.mod为准
  • Issue comment#322cargoedit2025-10-06 15:42
    chore: remove unused min func
  • Issue#320start-cat2025-09-10 08:17
    扫描结果缺失部分组件版本内容
  • Issue#319damoasis2025-09-03 04:30
    SARIF格式支持
  • Pull request#318cyberchen19952025-08-26 01:30
  • Pull request#317cyberchen19952025-08-25 12:55
  • Pull request#317luotianqi7772025-08-13 07:54
  • Pull request#314cyberchen19952025-07-22 03:48
  • Pull request#314luotianqi7772025-07-22 03:05
  • Issue comment#312NiceAsiv2025-04-27 06:27
    Opensca 扫描时是否可以设置忽略特定路径
  • Issue comment#303cyberchen19952025-04-21 02:04
    不能在线导出报告和SBOM清单
  • Issue comment#306cyberchen19952025-04-21 02:01
    [Bug] 扫描Jar包,生成的CycloneDX格式有误
  • Issue#306cyberchen19952025-04-21 02:01
    [Bug] 扫描Jar包,生成的CycloneDX格式有误

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 62 stars here means stars gained during the window, not the repo's star count.