Philippe Ombredanne is a veteran open-source software engineer with 19 years' experience focused on secure, healthy software supply chains. He is the lead maintainer of AboutCode, creator of the Package-URL (purl) specification and a principal maintainer of ScanCode and purlDB, blending technical stewardship with standards and open data. Philippe contributes across languages (Python, Java, Go) and roles—from backend engineering and security work to test automation and technical writing—on notable projects like Buildout, Drools/Kogito, and the fast Go code counter scc. His work emphasizes code quality, reproducible tooling and interoperable metadata, and he often fixes subtle integration and testing issues that improve long-term maintainability. Based in Texas but globally minded, he combines deep hands-on contributions with community-building in FOSS ecosystems.
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Role in this project:
Back-end Developer & Security Engineer
Contributions:15 releases, 534 reviews, 408 commits in 5 years 9 months
Contributions summary:Philippe primarily focused on improving the codebase's format, organization, and functionality. Their work involved refactoring and improving test code, including changes to test data handling and import organization within the tests folder. They also made enhancements to function signatures, formatting, and docstrings, indicating a focus on code quality and maintainability. The user also fixed a bug in the import runner to improve error handling during data imports.
A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby
Role in this project:
Technical Writer
Contributions:146 reviews, 94 commits, 55 PRs in 4 years 9 months
Contributions summary:Philippe's commits primarily focus on refining and expanding the documentation for the Package URL (purl) specification. They reorganized the document, improved formatting, added examples, and clarified various aspects of the specification. They also addressed feedback, improved the writing and added an FAQ section to improve the clarity and completeness of the documentation.
dependenciesspecificationsbompackage-urlgitter
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.