Re:Finding Critical Open Source Projects
by abharya on Friday December 11, 2020 @11:48PM
(#25395651)
We are working on this problem, it is not simple. Identifying dependency trees reliably across languages is not straightforward [only nice for package manager ones]. Follow https://github.com/ossf/criticality_score/issues/8
I seriously hope no actual decisions about resource allocation etc are made based on this.