{"adoption": {"forks": 163, "observed_at": "2026-08-28T04:05:18.944545+00:00", "stars": 1664}, "canonical_url": "https://ross.abutalabs.com/products/go-audit", "card": {"archived": false, "artifact_type": "cli-tool", "description": "go-audit is an alternative to the auditd daemon that ships with many distros", "domain": ["security", "monitoring"], "enriched": true, "function": ["logging", "monitoring", "security", "serialization"], "health_score": 99, "homepage": null, "language": "Go", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["slackhq/go-audit"], "name": "slackhq/go-audit", "platform": ["go", "cli"], "pushed_at": "2026-08-24T21:32:45+00:00", "repo": "slackhq/go-audit", "stars": 1664, "tags": ["auditd", "linux-audit", "netlink", "syslog", "-logs", "system-auditing", "devops", "command-line", "linux"], "topics": [], "urls": [], "use_cases": ["replace auditd with a faster JSON-outputting audit daemon", "stream Linux kernel audit events to syslog or Graylog", "collect system call audit logs in JSON for a SIEM", "monitor file access and process execution on Linux servers", "build a custom audit log pipeline with pluggable outputs"], "what_it_is": "go-audit is a Go-based replacement for the auditd daemon that consumes Linux kernel audit events via netlink and outputs them as JSON. It supports pluggable output pipelines including syslog, local files, Graylog2, and stdout.", "when_to_avoid": ["you need full auditd/audisp plugin compatibility", "you are not running Linux, since it depends on the kernel audit netlink interface", "you require GUI-based audit rule management"], "when_to_choose": ["you want audit logs in JSON instead of auditd's raw format", "you need a lightweight, high-performance audit daemon that never blocks", "you want to forward kernel audit events to modern log pipelines like Graylog"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/go-audit", "repo": "slackhq/go-audit", "role": "main", "score": 84}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:18.944545+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:44:30.013329+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "90b1411061d82f24de4ded0077cb3a52845670c6563c4edc0cef2042d19ff8a3", "fetched_at": "2026-08-28T04:05:18.944545+00:00", "kind": "readme", "missing": false, "url": "https://github.com/slackhq/go-audit"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 57}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3583, "days_push": 9, "days_rel": 72, "gap_med": 193, "n_releases_24m": 2}, "score": 84, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}