News for hackers. Stuff that matters.
Re:Finding Critical Open Source Projects by detaro on Friday December 11, 2020 @03:22AM (#25383577)
So basically the algorithm is designed to not find projects that are critical because they are deep in the foundations, depended on by nearly everyone but only worked on by a few people? (which is what "critical" would suggest at least to me) This seems to be mostly a "github marketing index"...

I seriously hope no actual decisions about resource allocation etc are made based on this.

Re:Finding Critical Open Source Projects by abharya on Friday December 11, 2020 @11:48PM (#25395651)
We are working on this problem, it is not simple. Identifying dependency trees reliably across languages is not straightforward [only nice for package manager ones]. Follow https://github.com/ossf/criticality_score/issues/8