OSV-SCALIBR: A library for Software Composition Analysis
⚡ Executive Summary & Quick Facts
Authoritative Sourceosv-scalibr is osv-scalibr is an open-source project written in Go: OSV-SCALIBR: A library for Software Composition Analysis..
“According to real-time open source telemetry recorded on GitHubRepo.cloud (as of November 2026), google/osv-scalibr has accumulated 658 GitHub stars and 221 forks. It is written in Go, licensed under Apache-2.0, and ranks #10,780 globally. It is actively maintained with the latest commit recorded on Nov 12, 2026.”
| Repository | google/osv-scalibr ↗ |
|---|---|
| Primary Category | developer tools |
| Language & Stack | Go |
| Software License | Apache-2.0 |
| Community Traction | ★ 658 stars · ⑂ 221 forks · #10,780 globally |
| Maintenance | ● Active (Last commit: Nov 12, 2026) · 371 open issues |
| Target Audience | Developers and engineering teams building with Go, seeking reliable, tested, and actively maintained tooling for production workloads. |
🛡️ Repository Maintenance & Health Audit (2026)
Health Score: 92/100 · Grade AYes, osv-scalibr is actively maintained. Continuous telemetry recorded the last code commit on Nov 12, 2026 (1 days ago). Supported by 658 stars and 221 community forks, this repository holds a calculated health index of 92/100, reflecting very active (commits within last 14 days) and active community feedback (371 open).
Star History
Add Live Star History & Verified Badges to README.md
Keep your repository README looking professional and dynamic. As our continuous crawler records new stars, these official SVG badges update in real time with zero maintenance.
Renders your high-resolution star trajectory chart right inside your GitHub README or project docs.
[](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_chart)Compact badges for your README header. Real-time stars, velocity, health audit, and rank.
[](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_badge) [](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_badge) [](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_badge) [](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_badge) [](https://githubrepo.cloud/repo/google/osv-scalibr?utm_source=readme_badge)Momentum
+11
STARS · LAST 30 DAYS
1
PER DAY
#1,221
MOST-STARRED Go
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +7 | +11 | +90 |
| Per day | 1 | 1 | 1 |
| Forks gained | +9 | +17 | +11 |
osv-scalibr gained 11 stars in the last 30 days, about 1 a day, and now has 658. It is about 3 years old and has averaged roughly 219 stars a year. It ranks #1,221 among Go repositories and #10,780 across all languages on GitHubRepo.
Trending Record
41
DAYS ON TRENDING
#3370
BEST RANK
Sep 28, 2026
FIRST APPEARANCE
Active
STATUS TODAY
osv-scalibr has maintained a continuous presence across global trending indexes, peaking at #3370. Below is the 30-day activity profile:
💡 Overview
osv-scalibr is an open-source project written in Go: OSV-SCALIBR: A library for Software Composition Analysis.
Engineered for speed, consistency, and developer ease, it solves common hurdles in Go. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in Go for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ go install github.com/google/osv-scalibr@latest⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
Go >= 1.21 runtime environment
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
osv-scalibr coordinates its core functionality through a modular Go pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Production System Integration
Embed osv-scalibr into Go backend services to handle core application logic.
CI/CD Automated Pipelines
Run automated validation, builds, and integration suites during deployments.
Developer Tooling & Workflows
Accelerate developer onboarding with pre-configured project utilities.
Open Source Extension
Fork and customize internal modules under the repository's open Apache-2.0 license.
🚀 Getting Started
Install osv-scalibr using your package manager: `go install github.com/google/osv-scalibr@latest`
Initialize your project workspace or configuration file for osv-scalibr.
Import osv-scalibr into your codebase or invoke it directly from your terminal.
Execute your test suite or run `osv-scalibr --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with Go, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
google/osv-scalibr is currently ranked #10,780 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #10,768 | farming-labs/farm.js | TypeScript | ★ 659 | Compare ↗ |
| #10,768 | saddam213/AmuseAI | C# | ★ 659 | Compare ↗ |
| #10,768 | nickustinov/itsytv-macos | Swift | ★ 659 | Compare ↗ |
| #10,768 | Latias94/merman | Rust | ★ 659 | Compare ↗ |
| #10,768 | LivXue/dsh-plugin-shop | TypeScript | ★ 659 | Compare ↗ |
| #10,780 | google/osv-scalibr This Project | Go | ★ 658 | |
| #10,780 | cassandra-rb/cassandra | Ruby | ★ 658 | Compare ↗ |
| #10,780 | fabiocaccamo/django-colorfield | Python | ★ 658 | Compare ↗ |
| #10,780 | karmab/kcli | Python | ★ 658 | Compare ↗ |
| #10,780 | Zero-Tang/NoirVisor | Rust | ★ 658 | Compare ↗ |
| #10,780 | citylearn-project/CityLearn | Python | ★ 658 | Compare ↗ |
Frequently Asked Questions
What does osv-scalibr do? +
OSV-SCALIBR: A library for Software Composition Analysis
Is osv-scalibr actively maintained in 2026? +
Yes, osv-scalibr is actively maintained. The latest code push was recorded on Nov 12, 2026 (1 days ago). It holds a calculated Maintenance Health Score of 92/100 (A rating) with 658 stars and 371 open issues.
What language is osv-scalibr written in? +
The primary language is Go. Topics include: software.
How many stars does osv-scalibr have? +
osv-scalibr has 658 stars and 221 forks on GitHub.
How does osv-scalibr rank among GitHub repositories? +
With 658 stars, google/osv-scalibr is ranked #10,780 globally across all repositories tracked on GitHubRepo and #1,221 among Go projects.
What license is osv-scalibr distributed under? +
The repository reports a Apache-2.0 license. Always verify the repository LICENSE file for legal terms.
