News for hackers. Stuff that matters.
Re:Finding Critical Open Source Projects by rwmj on Friday December 11, 2020 @03:01AM (#25383451)
It's nice that they're automating this even though the results seem currently a bit random. Fedora has a concept of Critical Path packages (https://fedoraproject.org/wiki/Critical_path_package). The concept is related to various activities, eg. a package is critical if is is needed when installing a graphical desktop. But as far as I know packages are picked manually and therefore we probably miss packages or over/underestimate criticality.
Re:Finding Critical Open Source Projects by abharya on Saturday December 12, 2020 @12:06PM (#25399675)
Thanks for feedback, adding it for analysis in https://github.com/ossf/criticality_score/issues/23