ossf/malicious-packages 91 merged
The OpenSSF database of malicious packages found across open source registries.
91 merged reports of malicious packages, published to the OpenSSF database in OSV format.
Open Source
Fixes, features, docs and security reports I've landed in open source projects that other engineers build on — from compilers and databases to supply-chain security.
Selected contributions
HigherOrderCO/Bend Merged
A massively parallel, high-level programming language.
Compiler fix — enabled net_size_check by default with separate max sizes for the C and CUDA backends.
tursodatabase/turso (formerly Limbo) 3 merged
A SQLite-compatible SQL database written in Rust.
Several pull requests into the core engine of the in-process database.
argoproj/argo-cd Merged
Declarative continuous delivery for Kubernetes.
Documentation overhaul — migrated the ApplicationSet generators docs to Go templates.
pocketbase/pocketbase Contributed
Open source realtime backend in a single file.
6 pull requests across the codebase — several were applied manually by the maintainer, so they show as closed rather than merged.