Cross-reference to metrics data

[david-a-wheeler]

If someone gets to a CII Best Practices badge entry, they may be trying to decide whether or not to use that project.

It'd be good to provide simple hypertext links to other sites that provide data about the projects, so that they can learn more. For example:

• The project home page & repo site
• metrics.openssf.org (this is early but it is available)
• LFX Insights
• GitHub / GitLab statistics page
• CHAOSS (if they build a site for such data)
• Snyk Advisor https://snyk.io/advisor/
• Open Source Insights (Google) - https://deps.dev/
• deps.cloud
• Synopysys / Black Duck Open Hub - this can be searched by name using https://www.openhub.net/p?query=openssl
• Relevant package advisory system, e.g., Rubygems for Ruby.

[sgoggins]

@david-a-wheeler : CHAOSS does build this data. We don't have a general page for metrics on any repository. We could provide these metrics for every repository on a given platform, using Augur, if we had a partnership with platform vendors like GitHub and GitLab.

[sgoggins]

Until then, if you request an augur instance at https://augurlabs.io you can get metrics for a given repository, or collection of repositories.

[david-a-wheeler]

If I have a repo's URL, how could I automatically determine if there's a page for its data in Augur & what that URL would be?