NS-CTAF for Open-Source Projects
Improve trust through contributor identity, dependency transparency, and secure development.
The trust problem
Maintainer identity, provenance, and dependency risk are hard to demonstrate at scale.
Priority domains
- D1 Identity & Provenance
- D2 Integrity
- D4 Dependency
Target level
CTA-1 Transparent
Signal maturity to downstream consumers and funders with independent evidence.
Turn software assurance into an external trust signal.
Fixed fee $5,000 USD · ~20 business days · Final report, CTA certificate, and improvement roadmap.