Your skills are needed for software we can trust.
ScortonJS is open-source trust infrastructure. Join the community to scan, score, audit, and secure the systems developers depend on — and to keep every product surface on the Scorton design system.
How you can contribute…
Technical
Contribute to the ScortonJS codebase
Improve scanners, CLI commands, tests, and the trust layer. Open a pull request and help ship the next release.
Get started
Design
Build with the Scorton UI design system
Use tokens, components, and guidelines from the Scorton UI repo so every Scorton surface shares one visual language.
Get started
Docs
Write docs, examples, and guides
Help developers scan, score, and audit faster. Fix typos, add examples, and make the first run obvious.
Get started
Community
Join the conversation
Answer questions, report issues, and share how you use ScortonJS in real workflows. Every voice shapes the framework.
Get started
Scorton UI
One visual language for every contribution
If you touch UI — this site, docs, dashboards, or new tools — start from github.com/scorton/scortonui. Scorton UI is dark-first navy with a yellow accent, built from CyberScor: tokens, shadcn-style components, and shared guidelines for design and engineering.
- Use navy
#0F0F13and accent#F9C92B - Prefer Scorton UI primitives over one-off styles
- Check Fundamentals, then Components, before adding new UI
Our mission
Make trust programmable. Developers should be able to inspect a system, measure posture, collect evidence, and decide — in the same workflow they already use to build.
Made by people who care about trust
When you contribute, you join a community that believes security and compliance should be inspectable, measurable, and extendable. You do not need to be a security expert to start — a laptop, curiosity, and the design system are enough.
Start with a good first issue, a docs fix, or a UI contribution that uses Scorton UI. Then grow into scanners, compliance modules, and architecture.
Good first issues
Good first issue
- Fix documentation typos and examples
- Add test coverage for existing tools
- Improve error messages
Intermediate
- Add a new security scanner
- Extend DORA or NIS2 checks
- Performance and caching improvements
Advanced
- Architecture improvements
- New language bindings
- Plugin APIs
Start from the current release
Build against ScortonJS 1.0.0. Install the package, run an audit, then clone the repo when you are ready to contribute.
pip install scortonjs==1.0.0 scorton audit example.com
git clone https://github.com/scorton/scortonjs.git cd scortonjs # see CONTRIBUTING.md