Chapman Pendery is a pragmatic software engineer with roughly eight years of experience and five years using Java as a primary language, blending academic study at Virginia Tech with hands-on roles in backend, DevOps, and frontend development. Based in Seattle, he has contributed to high-profile open-source projects—improving supply-chain security tooling (GUAC, Syft, Grype) and enhancing developer UX in Visual Studio Code—demonstrating strengths in parsing, data modeling, and developer workflows. He’s comfortable across the stack, from Go-based CLI and graph integrations to frontend terminal suggestion UX and small-team DevOps improvements like Compose workflows and DB diffing. As a current TA for a computer organization course, he pairs practical engineering with teaching, and he’s open to internships or small projects that leverage his AWS and GIS exposure. An understated asset is his knack for improving developer experience and infrastructure reliability in security-critical projects.
Contributions:20 releases, 27 reviews, 281 PRs in 1 year 2 months
Contributions summary:Chapman implemented the starting UI for command-line autocomplete, creating the foundational user interface elements and managing suggestions. Their work involved Go programming and the integration of the Bubble Tea and Lip Gloss libraries for UI construction. Code changes include the creation of `ui/suggestions/suggestions.go` and `ui/ui.go` files and implementation of suggestion and UI elements within the main application, thus contributing to the front-end.
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Role in this project:
Back-end Developer
Contributions:2 reviews, 15 commits, 19 PRs in 7 months
Contributions summary:Chapman primarily contributed to enhancing the CycloneDX and package cataloging capabilities of the Syft tool. They addressed a panic in CycloneDX generation by adding a component list, and added support for new languages and package types (e.g., PHP, Conan, CocoaPods, Haskell, and pnpm) including purl generation improvements for specific package managers. The user also worked on implementing new features like a "use-all-catalogers" flag and improved output options.
filesystemsspdxociclivulnerabilities
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.