anchore/grype
Maintainers
Subsystem ownership map for Grype, derived from git log on main. There is no CODEOWNERS file in the repo — all ownership data here comes from git history.
Top contributors overall
| Author | Commits |
|---|---|
| Alex Goodman | 486 |
| Christopher Angelo Phillips | 106 |
| Alfredo Deza | 106 |
| Keith Zantow | 101 |
| Dan Luhring | 99 |
| Weston Steimel | 80 |
| William Murphy | 43 |
| Will Murphy | 42 |
| (William and Will Murphy appear under both spellings; treat as the same person.) |
(Bot accounts excluded: dependabot[bot] 627, anchore-actions-token-generator[bot] 288, plus a long tail of small bot contributions.)
Subsystem ownership
| Subsystem | Recent contributors (git history) | Last activity |
|---|---|---|
Top-level CLI (cmd/grype/) |
Alex Goodman, Christopher Phillips, Will Murphy | Recent |
Vulnerability matcher (grype/vulnerability_matcher.go) |
Alex Goodman, Will Murphy, Keith Zantow | Recent |
DB v6 (grype/db/v6/) |
Alex Goodman, Christopher Phillips, Keith Zantow | Recent |
DB v5 (grype/db/v5/) |
Alex Goodman, Dan Luhring, Weston Steimel | Lower-frequency (legacy schema) |
Matchers (grype/matcher/) |
Alex Goodman, Will Murphy, Christopher Phillips | Recent |
Version comparators (grype/version/) |
Alex Goodman, Will Murphy, Weston Steimel | Recent |
Distro (grype/distro/) |
Alex Goodman, Christopher Phillips | Recent |
Presenters (grype/presenter/) |
Alex Goodman, Will Murphy, Keith Zantow | Recent |
VEX (grype/vex/) |
Adolfo García Veytia ("puerco"), Alex Goodman | Recent |
Quality gate (test/quality/) |
Alex Goodman, Christopher Phillips | Recent |
Install scripts (install.sh, test/install/) |
Dan Luhring, Alex Goodman | Lower-frequency |
The grype/vex/ package was originally driven by external contributor Adolfo García Veytia (project lead of OpenVEX), then maintained jointly with the core team.
How to find an owner
- Check
git log --format='%an %ad' --date=short -- <path>and look at the most recent committers. - For a specific function,
git blame -- <file>shows authorship line-by-line. - For ongoing discussions, the team holds a public community meeting (calendar link in
README.md).
Reaching the team
- GitHub issues: https://github.com/anchore/grype/issues.
- Discourse: https://anchore.com/discourse.
- Mastodon:
@grype@fosstodon.org. - Security: see
SECURITY.md— do not file public issues.
Built by Factory AutoWiki from public repository content. It is a generated preview for codebase exploration, not source-maintained documentation.