GUAC aggregates software security metadata into a high fidelity graph database.
⚡ Executive Summary & Quick Facts
Authoritative Sourceguac is guac is an open-source project written in Go: GUAC aggregates software security metadata into a high fidelity graph database..
“According to real-time open source telemetry recorded on GitHubRepo.cloud (as of November 2026), guacsec/guac has accumulated 1,571 GitHub stars and 227 forks. It is written in Go, licensed under Apache-2.0, and ranks #6,550 globally. It is actively maintained with the latest commit recorded on Nov 9, 2026.”
| Repository | guacsec/guac ↗ |
|---|---|
| Primary Category | attestations |
| Language & Stack | Go |
| Software License | Apache-2.0 |
| Community Traction | ★ 1.6K stars · ⑂ 227 forks · #6,550 globally |
| Maintenance | ● Active (Last commit: Nov 9, 2026) · 79 open issues |
| Target Audience | Developers and engineering teams building with Go, seeking reliable, tested, and actively maintained tooling for production workloads. |
🛡️ Repository Maintenance & Health Audit (2026)
Health Score: 97/100 · Grade A+Yes, guac is actively maintained. Continuous telemetry recorded the last code commit on Nov 9, 2026 (3 days ago). Supported by 1,571 stars and 227 community forks, this repository holds a calculated health index of 97/100, reflecting very active (commits within last 14 days) and healthy issue cadence.
Star History
Add Live Star History & Verified Badges to README.md
Keep your repository README looking professional and dynamic. As our continuous crawler records new stars, these official SVG badges update in real time with zero maintenance.
Renders your high-resolution star trajectory chart right inside your GitHub README or project docs.
[](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_chart)Compact badges for your README header. Real-time stars, velocity, health audit, and rank.
[](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_badge) [](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_badge) [](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_badge) [](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_badge) [](https://githubrepo.cloud/repo/guacsec/guac?utm_source=readme_badge)Momentum
+39
STARS · LAST 30 DAYS
1
PER DAY
#803
MOST-STARRED Go
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +7 | +39 | +90 |
| Per day | 1 | 1 | 1 |
| Forks gained | +1 | +5 | +11 |
guac gained 39 stars in the last 30 days, about 1 a day, and now has 1.6K. It is about 4 years old and has averaged roughly 393 stars a year. It ranks #803 among Go repositories and #6,550 across all languages on GitHubRepo.
Trending Record
4
DAYS ON TRENDING
#11037
BEST RANK
Nov 9, 2026
FIRST APPEARANCE
Active
STATUS TODAY
guac has maintained a continuous presence across global trending indexes, peaking at #11037. Below is the 30-day activity profile:
💡 Overview
guac is an open-source project written in Go: GUAC aggregates software security metadata into a high fidelity graph database.
Engineered for speed, consistency, and developer ease, it solves common hurdles in attestations, cyclonedx, cyclonedx-sbom. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in Go for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ go install github.com/guacsec/guac@latest⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
Go >= 1.21 runtime environment
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
guac coordinates its core functionality through a modular Go pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Autonomous AI Agents
Orchestrate intelligent workflows and tool-calling routines with guac.
Model Inference & Prompting
Integrate fast, local or cloud-hosted generative AI models directly into production code.
Context Memory & RAG
Augment language models with dynamic vector retrieval and structured project memory.
Developer Productivity
Automate repetitive engineering tasks, code generation, and test creation using AI agents.
🚀 Getting Started
Install guac using your package manager: `go install github.com/guacsec/guac@latest`
Initialize your project workspace or configuration file for guac.
Import guac into your codebase or invoke it directly from your terminal.
Execute your test suite or run `guac --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with Go, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
guacsec/guac is currently ranked #6,550 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #6,541 | gpui-ce/gpui-ce | Rust | ★ 1.6K | Compare ↗ |
| #6,546 | ffaker/ffaker | Ruby | ★ 1.6K | Compare ↗ |
| #6,546 | online-go/online-go.com | TypeScript | ★ 1.6K | Compare ↗ |
| #6,546 | seek-oss/braid-design-system | TypeScript | ★ 1.6K | Compare ↗ |
| #6,546 | dessalines/thumb-key | Kotlin | ★ 1.6K | Compare ↗ |
| #6,550 | guacsec/guac This Project | Go | ★ 1.6K | |
| #6,551 | php-standard-library/php-standard-library | PHP | ★ 1.6K | Compare ↗ |
| #6,551 | hylo-lang/hylo-old | Swift | ★ 1.6K | Compare ↗ |
| #6,551 | RunanywhereAI/wally | Rust | ★ 1.6K | Compare ↗ |
| #6,554 | grpc-ecosystem/grpc-health-probe | Go | ★ 1.6K | Compare ↗ |
| #6,554 | xMasterX/all-the-plugins | C | ★ 1.6K | Compare ↗ |
Frequently Asked Questions
What does guac do? +
GUAC aggregates software security metadata into a high fidelity graph database.
Is guac actively maintained in 2026? +
Yes, guac is actively maintained. The latest code push was recorded on Nov 9, 2026 (3 days ago). It holds a calculated Maintenance Health Score of 97/100 (A+ rating) with 1,571 stars and 79 open issues.
What language is guac written in? +
The primary language is Go. Topics include: attestations, cyclonedx, cyclonedx-sbom, graph, in-toto.
How many stars does guac have? +
guac has 1,571 stars and 227 forks on GitHub.
How does guac rank among GitHub repositories? +
With 1,571 stars, guacsec/guac is ranked #6,550 globally across all repositories tracked on GitHubRepo and #803 among Go projects.
What license is guac distributed under? +
The repository reports a Apache-2.0 license. Always verify the repository LICENSE file for legal terms.
