Maintained, verified container images and Helm charts, funded in the open
People fund the projects; named maintainers keep them patched. How it works
Use an image or chart
Free to pull, whether or not anyone pays. Every version is signed and can be checked by digest.
Fund a project
One-time or monthly, as a person or an organization. The money goes to the project, and every payment is public.
Maintain a project
Connect your repository. Maintainers are paid from the project's funding for the months they keep it patched.
The platform today
- Projects maintained
- 1
- Fully funded projects
- 0
- of 1 that ask for funding
- People and organizations funding
- 0
- Active maintainers
- 0
- 0 projects fully staffed
- Images and charts
- 1
- 1 container image
- Published versions
- 1
- $0 committed monthly towards $500 of monthly targets (0%) · $0 contributed and $0 paid to maintainers in total
Architectures: amd64, arm64
Projects
| Project |
|---|
commonlayer-org/baseMinimal non-root base root filesystem from Alpine packages, with a reduced BusyBox, cl-probe and no package manager.
|
1 result
Security overview
- 0critical
- 0high
- 1medium
- 0low
- 0critical
- 0high
- 0medium
- 0low
0 resolved in the last 30 days · 0 active exceptions · 0 published advisories
Oldest scan of a supported digest: . Scanners only report vulnerabilities that are publicly known and that they can match to the packages they detect. “No known issues” is the result of those scans at that time, not a guarantee that the software is free of vulnerabilities.
How funding works
- Contributions go to a project's treasury — never to a person.
- Once a month the treasury is settled by the project's published allocation policy: maintainer slots, infrastructure, a flexible pool, a continuity reserve.
- A maintainer is paid for a month only if they fulfilled their responsibilities. Compensation is never paid per vulnerability.
- Every line of every settlement, with its explanation, and every ledger transaction is public.