$ the-wire · showcase
OSS Scanner adds simplex-chat, tinyssh, tinyauth, openmetadata, pdf_oxide
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
Five established security-sensitive projects moved into OSS Scanner's coverage in the last day, while knowledge-work-plugins shipped a merged bump to its security-guidance bundle.
Enrol projects/tinyssh anthropics/oss-scanner
tinyssh is the highest-stakes of the batch: a small SSH server whose enrollment means its build and tests now run under the scanner, so upstream maintainers get findings pushed to the primary security contact named in project.yaml. Jan Mojzis confirms the enrollment as a core maintainer.
Enroll tinyauthapp/tinyauth anthropics/oss-scanner
tinyauth, the auth front end for self-hosted stacks, joins under maintainer steveiliop56. Projects of this shape sit directly on the login path, which is why the enrollment checklist requires a passing tools/check build before the PR is considered.
Enrol projects/openmetadata anthropics/oss-scanner
Openmetadata's enrollment under maintainer pmbrull brings a large data-catalog and metadata service into scope. Its checklist confirms tools/check openmetadata builds the project.
Enroll pdf_oxide anthropics/oss-scanner
pdf_oxide enrolled under yfedoseev. Parsers that ingest untrusted documents are a habitual fuzzing target, and this enrollment hands the project a security contact path it can be reached through.
simplex-chat: enrol project anthropics/oss-scanner
simplex-chat rounds out the batch, enrolled by shumvgolove. Separately, knowledge-work-plugins merged a bump of its security-guidance bundle from 3ea32df2 to ac996c0d, and claude-code's mods directory refreshed through its scheduled publish job.
