OpenSourceCheck

Auditors

Anyone with a registered signing key may submit attestations. Trust is a web of trust, not a gate โ€” weight each auditor by their track record. Registered keys below (npub, SSH principal, or PGP fingerprint) can be cross-checked out of band.

AuditorAttestationsValidated findingsRegistered keys
OpenSourceCheck Demo Key
opensourcecheck-demo ยท demo key
00
npub1n9mgw84wlks5vnwm2r32jaq5nlnwcjeveae0jeqjnfzcdy8ezlrsll2tdd
TheIcarusWings
theicaruswings
301
npub19tzp8lf3klmqj3dz9mz0qnuvjp7uyy9993gmljmyaxs8phztj7wsnujvq5
E57066B50827950634404E4DC17C29E309C078A7