Milestones
List view
Second ecosystem and external trust wave: SwiftPM, Dart/Flutter Pub, Elixir Mix, OpenSSF Best Practices badge, and maintained-scorecard follow-up.
No due date•0/5 issues closedFirst ecosystem expansion wave focused on high-reach CI, deployment, and enterprise package surfaces: GitLab CI, Kubernetes/Helm, .NET/NuGet, and PHP Composer.
No due date•0/4 issues closedSupply-chain trust release: container digest remote validation, parser fuzzing, release SBOM/provenance artifacts, and JVM wrapper checksum rules.
No due date•0/4 issues closedAdoption and scale release: conservative remediation suggestions, parser precision, legacy baseline workflow, resource limits, concurrency, and parser caching.
No due date•0/5 issues closed