Skip to content

Milestones

List view

  • Second ecosystem and external trust wave: SwiftPM, Dart/Flutter Pub, Elixir Mix, OpenSSF Best Practices badge, and maintained-scorecard follow-up.

    No due date
    0/5 issues closed
  • First ecosystem expansion wave focused on high-reach CI, deployment, and enterprise package surfaces: GitLab CI, Kubernetes/Helm, .NET/NuGet, and PHP Composer.

    No due date
    0/4 issues closed
  • Supply-chain trust release: container digest remote validation, parser fuzzing, release SBOM/provenance artifacts, and JVM wrapper checksum rules.

    No due date
    0/4 issues closed
  • Adoption and scale release: conservative remediation suggestions, parser precision, legacy baseline workflow, resource limits, concurrency, and parser caching.

    No due date
    0/5 issues closed