releaselock.dev · supply chain releases

Can this release be swapped?

A searchable directory of popular CLIs, GitHub Actions, and install-from-releases tools. See if releases are immutable, attested, signed, checksum-only, or still unlocked.

Directory

Popular binary-shipping projects, scored on how hard it is to swap a published release.

Loading…

Project Ecosystem Release status Last checked

How it works

Three steps from “I installed this” to “I know if the release can move.”

1

We watch popular releases

Track high-download CLIs, Actions, and binary install paths on GitHub Releases and similar feeds.

2

We score the lock level

Immutable assets, attestations, real signatures, checksums only, or nothing. Clear badges, no jargon fog.

3

You get the weekly digest

Newly locked projects, still-swappable ones worth a second look, and featured verified-release listings.