Skip to content
CAI
Produce a survey ↗Verify a survey

goharbor/harbor

This system is a container image registry and security platform that manages the lifecycle of container images, Helm charts, and other artifacts. It provides comprehensive features for artifact storage, replication, and scanning, alongside robust access control and audit logging capabilities. The codebase has been significantly refactored to modernize its architecture, replacing legacy frameworks with modular Go controllers and a new templating system for configuration management.

47.6

Weak · 6 August 2026

220k

lines of production code

Go

with TypeScript

13

bus factor · 521 authors in all

3

measurements over time

CAI band scale
CAI trend line

How it got here

2016–2018 · Architecture modernization and security hardening

This period focused on a comprehensive architectural overhaul, replacing the legacy Beego framework with a modern Go-based API and service layer. The work involved removing obsolete authentication plugins, legacy deployment scripts, and outdated static assets, while introducing pluggable authentication providers and a new job service v2. Security was strengthened by enforcing non-root container users, implementing header-based secret validation, and centralizing configuration and role constants.

79 changes

2019–2020 · Controller and service architecture modernization

This period focused on refactoring the codebase's core architecture, introducing a new modular controller pattern for managing artifacts, projects, and repositories. It also involved rebuilding the jobservice with a Redis-backed worker model and establishing a new, Python-based configuration and migration framework for deployment and upgrades.

97 changes

2021–2026 · Controller architecture and configuration modernization

This period focused on modernizing the codebase by introducing a new controller-based architecture for managing system resources, users, and jobs. It also involved centralizing configuration management with a templated, type-safe approach and migrating the cache backend from Redis to Valkey.

57 changes

CAI lens gauges

Survey your own repository

goharbor/harbor was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.

Survey a repository

About this page

  • The description of this project is derived from its own commit history, not from its README.
  • The score is its highest published measurement, taken on 6 August 2026 at a pinned commit. It is not a live figure and does not change until the project is measured again.
  • Measured at commit 907173f70f — the exact code this score is about.
  • Scored under rubric rubric-2026.08.19. Score the same commit under that rubric and you get the same number.
CAI link cards