Software engineer focused on open-source tooling and software supply chain security — SBOMs, dependency integrity, and policy-as-code. Currently a Computer Science student.
I'm part of Google Summer of Code 2026, working with FOSSology on the CycloneDX SBOM agent, and LFX Mentorship 2026, working with OpenSSF/Minder on policy evaluation tooling.
Currently working with: Go, Python, PHP, Docker, Kubernetes, PostgreSQL
Some things I've built:
- Noise Map — a real-time crowdsourced noise-pollution tracker (Go, PostGIS, Redis, WebSockets)
- AI Slop Guardian — a GitHub App that flags likely AI-generated pull requests and issues
Research: Two published studies on SBOM and dependency quality, based on empirical analysis of open-source projects.
I also contribute to open-source projects, mostly around OpenSSF and Kubernetes tooling.
Reach me at krrishbiswas175@gmail.com or LinkedIn.



