Starred repositories
A repository around how we can have a build provenance document you *might* trust
Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
Cyber Reasoning Systems for Bug-Finding and Patching in Open Source Software
Deterministic first pass of a code review: groups a change in reading order, describes each group in plain sentences, and lists what can be skimmed.
🌱 EcoLogits tracks the energy consumption and environmental footprint of using generative AI models through APIs.
My personal wiki-style knowledge base about Toyota 86 / GR86 / Subaru BRZ / Scion FR-S cars.
DIY BLE device for RaceChrono, currently supports reading data from the CAN bus
How-to: tune a Link G4X ECU on Linux with PCLink running under Wine, FTDI cable mapped through to a Wine COM port. Documents the non-obvious Wayland virtual-desktop and brltty/udev gotchas.
Know what your code change can break before you merge it — PR impact analysis across code, APIs, config, deployments, ownership, and system dependencies.
Slides for my CodeCommons talk on linking package identities and ecosyste.ms metadata to archived source in Software Heritage.
Pure Go library and CLI for detecting programming languages from source content and file paths.
The public GitHub home of the Akrites Security Incident Response Team (SIRT)
Go client for the Software Heritage Web API, generated from an OpenAPI description with hand-written pagination, rate limiting and auth
Calculate Software Heritage identifiers for package archives in the browser with Go and WebAssembly.
Clone archived repositories from Software Heritage using ordinary Git.
Software Heritage coverage checks for critical package repositories
A Go library for parsing and validating codemeta.json software metadata, with no third-party dependencies and TinyGo support.
publiccode.yml parser library and validator in Go