This is your work, valued

US East Coast

David A. Wheeler

Elite
@david-a-wheeler

I work at the Open Source Security Foundation (OpenSSF), part of the Linux Foundation. Much of this isn't work though.

dwheeler.com

flawfinder. a static analysis tool for finding vulnerabilities in C/C++ source code

580

spdx-tutorial. A brief tutorial on how to use Software Package Data Exchange (SPDX)

145

railroader. A static analysis security vulnerability scanner for Ruby on Rails applications (OSS fork of Brakeman)

48

mmverify.py. Metamath verifier in Python

42

jiffo. Javascript Interactive Fiction Framework that's Open Source Software - INACTIVE

13

vim-metamath. vim mode for editing metamath files

11

make-booster. Utility routines to simplify using GNU make and Python

8

awesome-static-analysis. Static analysis tools for all programming languages

6

make-audit. Easy-to-use tool for auditing Makefiles for errors

6

metamath-test. Test metamath verification implementations

6

david-a-wheeler.github.io. Personal website contents

4

linux-safename-1. Linux kernel modifications

3

cl-metamath. Metamath library/verifier in Common Lisp

3

plot-stars. Plot nearby stars, e.g., for Project Hail Mary

3

markdown-licenses. A collection of open source licenses in Markdown format. Contributions are always welcome!

2

oss-vulnerability-guide. A guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.

1

wg-digital-identity-attestation. Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the code they maintain, produce and use.

1

security-reviews. A community collection of security reviews of open source software components.

1

holophrasm. Holophrasm: a neural Automated Theorem Prover for higher-order logic

1

Creative-Commons-Markdown. Markdown-formatted Creative Commons licenses

1

metamath-ada. A metamath proof checker in Ada

1

demo-new. Demo of a new GitHub project

1

hello. Say "hello world" as a simple project example

1

wivet. Web Input Vector Extractor Teaser

1

choosealicense.com. A site to provide non-judgmental guidance on choosing a license for your open source project

1

wg-security-tooling. OpenSSF Security Tooling Working Group

1