openRiskScore
tern
| openRiskScore | tern | |
|---|---|---|
| 1 | 1 | |
| 29 | 935 | |
| - | 0.6% | |
| 4.0 | 3.2 | |
| 7 months ago | about 2 months ago | |
| Python | Python | |
| - | BSD 2-clause "Simplified" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
openRiskScore
tern
-
Learn by reading code: Python standard library design decisions explained
A project you may want to look into adding is Tern [0]. I've had a good time reading through the code over the past couple of weeks, and have found it to be at least not "bad" code, and pretty easy to understand.
Specifically how they are untarring each container layer and creating a chroot jail to run commands inside is fairly self-contained and interesting.
[0] https://github.com/tern-tools/tern
What are some alternatives?
flower - Flower: A Friendly Federated Learning Framework
ort - A suite of tools to automate software compliance checks.
scorecard - OpenSSF Scorecard - Security health metrics for Open Source
awesome-security-GRC - Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
FATE - An Industrial Grade Federated Learning Framework
cdxgen - Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962
Lynx - A very light weight dependency graph for systems with massive calculation complexities or scheduling systems
goodcode - A curated collection of annotated code examples from prominent open-source projects
ElectricEye - ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
spdx-spec - The SPDX specification in MarkDown and HTML formats.
Open-Risk-Manual-PdfBooks - Collection of PdfBooks extracted from the Open Risk Manual
import-linter - Import Linter allows you to define and enforce rules for the internal and external imports within your Python project.