Enrol projects/tablepro

[datlechin]

Enrol projects/tablepro

I have verified each of the following before submitting this project (tick each box by changing [ ] to [x]):

• I am a core maintainer of this project.
• I accept the OSS Scanner terms.
• I confirm that I believe my project meets the inclusion criteria and is an established project that users depend on.
• project.yaml follows the README (one project per PR; tools/validate.py passes locally).
• tools/check <name> builds the project, and its tests run in the shell that follows.
• primary_contact must be the email address of the primary security contact.
• There is a Dockerfile that builds the project (required) in one of two places: in the project's repository at the path dockerfile: names, or next to project.yaml in this repo.
• threat_model.md is written for this project (recommended but optional), placed in the same way: in the repository at the path threat_model: names, or next to project.yaml in this repo.

To sign the CLA, post a comment on this pull request that contains only this line: I have read the CLA Document and I hereby sign the CLA

To change an enrolment, edit project.yaml; to pause reports, set disabled: true; to withdraw the project, remove projects/<name>/.

Context (optional): if you believe it is not obvious why your project qualifies for our inclusion criteria, you may write a brief note here to explain why you feel it does.

• TablePro is a database client for macOS, iOS and Linux: 6.3k stars, 420 forks, AGPL-3.0, 138 releases since December 2025.
• It connects to servers its users may not control, parses their responses, opens files from other apps, and stores database passwords and SSH keys.
• The Mac and iOS apps need Xcode, so the image builds the Linux app and the Swift targets that compile on Linux. threat_model.md covers the rest as source.
• primary_contact is the address in SECURITY.md.
• tools/check --no-shell tablepro on an x86-64 runner: 16 min build on 4 CPUs, Linux and Swift tests pass, and they rebuild offline under the agent limits: https://github.com/TableProApp/TablePro/actions/runs/39389235750

[github-actions]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[github-actions]

Enrolment triage: projects/tablepro

Repository: TableProApp/TablePro at main · opened by datlechin

	Check	Result
✅	Repository	created 10 months ago, last push today
ℹ️	Stars / forks	6,283 stars · 422 forks · 16 watching
⚠️	Outside participants	2 people from outside the project opened 2 of the last 100 issues and pull requests
ℹ️	Criticality score	0.60 on the OpenSSF scale of 0 to 1 signals created_since 10, updated_since 0, contributor_count 59, org_count 5, commit_frequency 100.5, recent_releases_count 100, closed_issues_count 1,379, updated_issues_count 1,381, comment_frequency 0.9, dependents_count 72
ℹ️	Package rank	by downloads: nothing from this repository found in the top 15,000 on PyPI or the top 1,000 on crates.io
✅	License	AGPL-3.0
✅	Opened by an active maintainer	member of the owning organisation; 100+ commits in the last 12 months; #1 contributor
✅	Contact in SECURITY.md	hello@tablepro.app is in SECURITY.md
ℹ️	OSS-Fuzz	not found in OSS-Fuzz
✅	.oss-scanner/ in the repository	present (Dockerfile, swift, threat_model.md); Dockerfile at .oss-scanner/Dockerfile
✅	Pull request scope	only this project's directory
✅	tools/validate.py	passes
✅	Checklist	all 8 ticked

_{Automated, from public data, to help reviewers. Enrolment is decided case by case against the criteria. If you think we got something wrong, please tell us in a reply.}

[datlechin]

I have read the CLA Document and I hereby sign the CLA