DevPulse

Tracks open source project health across 30+ metrics — bus factor, contributor retention, PR velocity, review ratios, release cadence. Quantitative signals that separate actively maintained projects from ones running on inertia.

• 30+ Metrics
• AI Insights
• Bus Factor
• Health Grading

DevTrace

Scores contributors across 25+ identity, provenance, engagement, and behavior signals — with actionable narrative behind every score. Cross-VCS identity proofs and a GitHub Action bring trust checks into PR workflows, mapped to NIST SSDF.

• 25+ Signals
• AI Narratives
• GitHub Action
• Cross-VCS

DevRadar

Tracks how container image vulnerabilities change over time. Submit a digest-pinned SBOM once — no registry credentials — and DevRadar re-scans daily with Grype and Trivy, building causal timelines of added, resolved, and newly fixable findings plus a work queue ranked by KEV, EPSS, and fix availability.

• SBOM-Based
• KEV + EPSS
• CVE Timelines
• OpenVEX
• Private Images

DevProof

Composes files from git repos and local paths into OCI artifacts named by a content digest that is byte-identical on every machine. Verification answers integrity, trust, and semantics separately, so an unchecked dimension reports not-evaluated rather than a green check.

• Byte-Identical
• OCI Referrers
• Policy Gated
• Go SDK