Hacker GitHub

← All repos

ossf/criticality_score

View on GitHub ↗ ★ 1,481 Go

Gives criticality score for an open source project

17 mentions on Hacker News by 11 people: 3 stories, 14 comments · first 2020-12-11 · latest 2024-04-04

Mentions per year 17 mentions · busiest year 2020 (11)
20082026
AllStoriesComments NewestTopOldest
  1. LF OpenSSF "criticality score" for 100K Github repos, https://github.com/ossf/criticality_score & https://docs.google.com/spreadsheets/d/1uahUIUa82J6WetAqtxCM... > Generate a criticality score for every open source project. Create a list…
    comment by transpute · 2022-09-24 · in 'Securing Open Source Software Act' introduced to US Senate
  2. …xkcd comic in [1] is about. [1] https://opensource.googleblog.com/2020/12/finding-critical-o... [2] https://github.com/ossf/criticality_score#public-data [3] https://github.com/ossf/wg-securing-critical-projects#how-we... [4]…
    comment by anarazel · 2022-01-13 · in Making Open Source software safer and more secure
  3. …( https://github.com/ossf/scorecard ): auto-generated security checks for OSS, Criticality Score ( https://github.com/ossf/criticality_score ): auto-generated criticality score for OSS, Package Feeds ( https://github.com/ossf/package-feeds…
    comment by kimsterv · 2021-03-27 · in Open Source Security Foundation
  4. …places (like custom issue trackers), but this is not straightforward as it sounds. Ideas welcome!. https://github.com/ossf/criticality_score/issues/29
    comment by abharya · 2020-12-13 · in Finding Critical Open Source Projects
  5. …packages missing that don't use all metrics on github, plus non-github projects. Capturing this in https://github.com/ossf/criticality_score/issues/21
    comment by abharya · 2020-12-12 · in Finding Critical Open Source Projects
  6. Thanks for feedback, adding it for analysis in https://github.com/ossf/criticality_score/issues/23
    comment by abharya · 2020-12-12 · in Finding Critical Open Source Projects
  7. …trees reliably across languages is not straightforward [only nice for package manager ones]. Follow https://github.com/ossf/criticality_score/issues/8
    comment by abharya · 2020-12-12 · in Finding Critical Open Source Projects
  8. filed https://github.com/ossf/criticality_score/issues/23
    comment by abharya · 2020-12-12 · in Finding Critical Open Source Projects
  9. Filed https://github.com/ossf/criticality_score/issues/20 , we will fix this, have an idea on the issue.
    comment by abharya · 2020-12-11 · in Finding Critical Open Source Projects
  10. …git, and this tool seems to require git. Actually, in its current state it seems to require GitHub: https://github.com/ossf/criticality_score/blob/main/critical... This probably omits some other projects as well which don't use git or…
    comment by arp242 · 2020-12-11 · in Finding Critical Open Source Projects
  11. The criteria https://github.com/ossf/criticality_score/blob/main/README.m... are designed to give higher scores to projects that are updated frequently by many contributors from different organizations, so of course the random Nebraskan's…
    comment by yorwba · 2020-12-11 · in Finding Critical Open Source Projects
  12. There are some issues with the criticality score ( https://github.com/ossf/criticality_score ). For example, it counts the number of issues as determining criticality. If there is any kind of money attached to this score (now or in the…
    comment by cryptica · 2020-12-11 · in Finding Critical Open Source Projects
  13. Thanks, fixed in https://github.com/ossf/criticality_score/commit/fddcc093c7e...
    comment by abharya · 2020-12-11 · in Finding Critical Open Source Projects
  14. …the results are often bizarre, and it's not hard to see why - the metrics and algorithm are here: https://github.com/ossf/criticality_score#criticality-score . That algorithm seems unnecessarily complicated and includes somewhat dubious…
    comment by hn_throwaway_99 · 2020-12-11 · in Finding Critical Open Source Projects