Observed arrival · 2026-10-30

ReleaseLock’s release-swappability directory

releaselock.dev Visit website

Editorial interest 82/100 Selection signal · not a rating of the site

A searchable directory for assessing how resistant CLI, GitHub Action, and release-installed tools are to having their releases replaced.

Landing page captured for the 2026-10-30 issue.

For: Teams relying on third-party CLI and CI releases
Worth noticing: GoReleaser and Sigstore Cosign are featured as immutable with no drift; many other listed projects are marked checksums only.

Field notes

The snapshot reports 1,814 repositories tracked, including 230 categorized as immutable or attested and 1,375 still swappable; those headline groups do not cover the full tracked count. Featured GoReleaser and Sigstore Cosign entries are marked immutable with no drift, while numerous other rows are labeled checksums only. Listings also expose ecosystem and last-checked dates.

Observed signals

Read the marks

Editorial observations of this landing page, not a rating.

○OpenPublic substance visible

✦PrettyNotable craft visible

●ProPolished or operationally mature

◎NicheUnusually specific use

One card from the complete issue

An Heir Still Staked

311,135 arrived 1,000 judged 977 catalogued Enter the complete issue