Repository navigation
wasmtime: Favor github security advisories to emails - #1156
Merged
Merged
Conversation
This is our default for handling advisories anyway, so configure this to to through that channel rather than email.
alexcrichton
requested review from
aterzis-ant,
carlini,
punitshah,
sb- and
srxzr-ant
as code owners
October 27, 2026 00:59
|
All contributors have signed the CLA ✍️ ✅ |
Enrolment triage:
|
| Check | Result | |
|---|---|---|
| ✅ | Repository | created 9 years ago, last push today |
| ℹ️ | Stars / forks | 18,777 stars · 1,897 forks · 164 watching |
| ℹ️ | Outside participants | 22 people from outside the project opened 35 of the last 100 issues and pull requests |
| ℹ️ | Criticality score | 0.83 on the OpenSSF scale of 0 to 1signalscreated_since 131, updated_since 0, contributor_count 858, org_count 5, commit_frequency 37.1, recent_releases_count 80, closed_issues_count 800, updated_issues_count 896, comment_frequency 1.3, dependents_count 33,028 |
| ℹ️ | Package rank | by downloads: nothing from this repository found in the top 15,000 on PyPI or the top 10,000 on npm or the top 1,000 on crates.io |
| ✅ | License | Apache-2.0 |
| ✅ | Opened by an active maintainer | member of the owning organisation; 100+ commits in the last 12 months; #1 contributor |
| ℹ️ | Contact in SECURITY.md |
SECURITY.md gives no email address to check wasmtime-security@bytecodealliance.org against |
| ✅ | OSS-Fuzz | in OSS-Fuzz as wasmtime, with the same primary contact |
| ✅ | .oss-scanner/ in the repository |
present (Dockerfile, threat_model.md); Dockerfile at .oss-scanner/Dockerfile |
| ✅ | Pull request scope | only this project's directory |
| ✅ | tools/validate.py |
passes |
| Checklist | the pull request template's checklist is missing from the description |
Automated, from public data, to help reviewers. Enrolment is decided case by case against the criteria. If you think we got something wrong, please tell us in a reply.
Contributor
Author
|
I have read the CLA Document and I hereby sign the CLA |
sb-
approved these changes
Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This is our default for handling advisories anyway, so configure this to to through that channel rather than email.