{"adoption": {"forks": 117, "observed_at": "2026-08-28T04:05:40.138352+00:00", "stars": 1818}, "canonical_url": "https://ross.abutalabs.com/products/lanzaboote", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur]", "domain": ["security", "operating-systems", "developer-tools"], "enriched": true, "function": ["security", "cryptography", "cli", "developer-tools"], "health_score": 99, "homepage": "https://nix-community.github.io/lanzaboote/", "language": "Rust", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["nix-community/lanzaboote"], "name": "nix-community/lanzaboote", "platform": ["rust", "cli"], "pushed_at": "2026-08-25T11:47:15+00:00", "repo": "nix-community/lanzaboote", "stars": 1818, "tags": ["secure-boot", "uefi", "nixos", "measured-boot", "tpm2", "unified-kernel-image", "systemd-boot", "bootloader", "linux"], "topics": ["efi", "nix", "nixos", "nixpkgs", "rust", "security", "uefi", "measured-boot", "secure-boot", "tpm2"], "urls": [], "use_cases": ["enable secure boot on nixos", "sign nixos kernel and initrd for uefi secure boot", "set up measured boot with tpm2 on nixos", "create unified kernel images for nixos", "protect luks encryption keys with tpm measurements", "replace systemd-boot with a secure boot bootloader on nixos"], "what_it_is": "Lanzaboote is Rust tooling that brings UEFI Secure Boot and Measured Boot support to NixOS. Its lzbt tool signs boot components, builds Unified Kernel Images, and installs them to the EFI System Partition, with TPM-based measurement for binding secrets.", "when_to_avoid": ["you are not comfortable with recovery tools or lack a backup, since misconfiguration can leave the system unbootable", "your system is not installed in UEFI mode or does not use systemd-boot", "you need guaranteed support across arbitrary hardware, as firmware behavior is inconsistent"], "when_to_choose": ["you run NixOS with systemd-boot and want UEFI Secure Boot with your own keychain", "you want TPM2 Measured Boot to bind disk encryption secrets to boot state", "you need a reproducible, Nix-integrated signing and UKI installation flow"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/lanzaboote", "repo": "nix-community/lanzaboote", "role": "main", "score": 84}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:40.138352+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:20:08.862234+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "2b635a285d0761dfcb699ecd98cc88b17e07ddb4feeea446deebe1988881ba13", "fetched_at": "2026-08-28T04:05:40.138352+00:00", "kind": "readme", "missing": false, "url": "https://github.com/nix-community/lanzaboote"}, {"content_hash": "4d45b6fb86b0bac36eaa860f64bb2fe92876c285c4739bf2b6861b2728fc6470", "fetched_at": "2026-08-29T10:59:07.421946+00:00", "kind": "homepage", "missing": false, "url": "https://nix-community.github.io/lanzaboote/"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 98, "rhythm": 57}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1381, "days_push": 8, "days_rel": 72, "gap_med": 193, "n_releases_24m": 4}, "score": 84, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}