https://github.com/Nix-Security-WG/nix-security-tracker
Web service for managing information on vulnerabilities in software distributed through Nixpkgs
https://github.com/Nix-Security-WG/nix-security-tracker
nixpkgs security vulnerabilities
Last synced: 2 months ago
JSON representation
Web service for managing information on vulnerabilities in software distributed through Nixpkgs
- Host: GitHub
- URL: https://github.com/Nix-Security-WG/nix-security-tracker
- Owner: Nix-Security-WG
- Created: 2023-08-31T16:49:45.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2025-08-01T15:19:52.000Z (2 months ago)
- Last Synced: 2025-08-01T15:36:28.328Z (2 months ago)
- Topics: nixpkgs, security, vulnerabilities
- Language: Python
- Homepage: https://tracker.security.nixos.org
- Size: 2.18 MB
- Stars: 54
- Watchers: 9
- Forks: 11
- Open Issues: 117
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
Awesome Lists containing this project
- best-of-nix - GitHub - 49% open · ⏱️ 18.09.2025) (Security)
README
# Nixpkgs Security Tracker
The **Nixpkgs Security Tracker** is a web service for managing information on vulnerabilities in software distributed through Nixpkgs.
This software is currently in prototype stage.
A demo deployment is available at .
This tool is eventually supposed to be used by the Nixpkgs community to effectively work through security advisories.
We identified three interest groups that the tool is going to address:
**Nix security team members** use this to access an exhaustive feed of CVEs being published, in order to decide on their relevance, link them to affected packages in Nixpkgs, notify package maintainers and discuss the issue with other team members.
**Nixpkgs package maintainers** are able to get notified and receive updates on security issues that affect packages that they maintain.
By discussing issues with security team members and other maintainers, they can further help on figuring out which channels and packages are affected and ultimately work on fixes for the issue.
**Nixpkgs users** are able to subscribe and stay updated on ongoing security issues that affect the packages they use.