What is OSS Protector?
OSS Protector is a shared watchlist for open-source maintainers. It turns maintainer reports and imported abuse signals into a feed that teams can review before merging suspicious pull requests. The GitHub App joins new pull requests, checks files and patch snippets, and posts an assessment with a verdict and reason. Reports are tracked as structured signals, and only validated or corroborated evidence affects the public score. Maintainers can also correct listings when something is wrong.
Key features
- Reviews pull requests automatically with a shared GitHub App.
- Inspects files and patch snippets for abuse patterns.
- Scores reports using AI verdicts and reasons.
- Tracks signals as submitted, reviewed, validated, or dismissed.
- Publishes a live feed of risky accounts and records.
- Lets maintainers correct listings with dismiss or allow commands.
Category
Raed Bahri
