Re:Finding Critical Open Source Projects
by stonogo on Friday December 11, 2020 @03:07AM
(#25383504)
I'm interested in the gulf between low-level systems code and effectively end-user code here. Things like GLib, Cairo, Harbuzz, etc -- none of the end-user tools work without them. It really demonstrates just how difficult this evaluation can be.
[ Parent
| on HN ]
Re:Finding Critical Open Source Projects
by abharya on Friday December 11, 2020 @11:22PM
(#25395505)
It is definitely difficult especially with critical dependencies. We are looking for any criteria to identify these in automated fashion. Parallely, for ones we know about those are we are trying to run our automated tools on. E.g. glib, cairo, harfbuzz are all continuously fuzzed as part of OSS-Fuzz - https://github.com/google/oss-fuzz/tree/master/projects