News for hackers. Stuff that matters.

A comment on Cloudflare CTO: “If we did [take on GitHub] what features would you like?”. Parent comment

Re:Cloudflare CTO: “If we did [take on GitHub] what features... by asveikau on Thursday May 30, 2019 @04:34PM (#20055633)
> quality of the repo (as measured by forks/stars/pagerank...)

These two seem unrelated. Quality is not measured by popularity. There is plenty of popular stuff that's junk, and good stuff that nobody uses.

[ Parent | on HN ]
Re:Cloudflare CTO: “If we did [take on GitHub] what features... by riyakhanna1983 on Thursday May 30, 2019 @05:21PM (#20056033)
Precisely. For my organization, I'm looking for a way to quantitatively measure and compare quality/security postures of repos/packages when importing.
[ Parent | on HN ]
Re:Cloudflare CTO: “If we did [take on GitHub] what features... by asveikau on Thursday May 30, 2019 @06:08PM (#20056419)
Sounds tough. What are your ideas to measure so far?

For the security angle it seems the first naive thing would be to count prior known vulnerabilities, but then, the projects that do absolute worst at that are not going to have discovered their security bugs let alone document them well.

[ Parent | on HN ]