$ the-wire · showcase
fasthttp joins the scanner roll
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
OSS Scanner picked up two established HTTP libraries in one day, with valyala/fasthttp enrolled by its own maintainer and emdash merged through review.
Enroll valyala/fasthttp anthropics/oss-scanner
fasthttp is wired in as projects/fasthttp scanning the master branch with reports routed to erik@dubbelboer.com, the security contact named in SECURITY.md. The Dockerfile builds on golang:1.27-bookworm, verifies dependencies, and warms normal and race test caches, running both suites during setup while letting failures leave the image inspectable.
Enroll valyala/fasthttp anthropics/oss-scanner
The enrollment PR confirms the submitter is a core maintainer and that tools/check fasthttp builds the project locally, the gate every new entry passes before scanning begins. That means new findings against the HTTP/1.x server and client library flow straight to the maintainer who can act on them.
Enroll httpx2 anthropics/oss-scanner
httpx2, led by Kludex, is still open: project.yaml validates locally and the maintainer has accepted the OSS Scanner terms, so the remaining step is review rather than packaging. Nothing to change on your side until it merges.
Enrol projects/emdash anthropics/oss-scanner
emdash was enrolled under projects/emdash by khoinguyenpham04 and promptly merged by Sam Barani. The short tail of the day is two more enrollments in queue, this one plus httpx2: routine intake work, no breaking changes to react to.
