census
census copied to clipboard
ossf
📜Automated review of open source software projects
Consider counting how many packages depend on something (and possibly their popularity), to emphasize popular libraries. It may be that this is essentially captured in popularity counts, but perhaps not.
Consider the number of downstream-only patches. E.G., if a deb or rpm includes more than 5 patches which have not been accepted upstream, the package receives a point. Distros carry...
Currently a project's role (e.g. Shared Library, Program, Application Data, etc.) is obtained from https://packages.debian.org/wheezy/. For example, to get a project's 'role' and 'implemented in', one goes to https://packages.debian.org/wheezy/bash and...
…plus some others worth investigating If you don't feel like going through all the other merge requests individually, they are all here as well. They can be placed wherever you...
In a future version, consider adding "truck factor" ("hit by a bus factor") as a metric. See "What is the Truck Factor of Popular GitHub Applications? A First Assessment" https://peerj.com/preprints/1233v1.pdf...
I see nginx mentioned in the paper, but its not in results.csv or projects_to_examine.csv, did it get lost in the process? Risk index should be ~8 points if I counted...
I have be thinking on creating a cross distribution popcon project. Debian is a vast resource for popcon, but Ubuntu has it's own collection[1](popcon.ubuntu.com), and other distribution don't gather such...
