search

oss-review-toolkit / ort

A suite of tools to automate software compliance checks.
https://oss-review-toolkit.org
Apache License 2.0
1.53k stars 300 forks source link

Advise about the quality / health of an Open Source project / dependency package #3317

Open sschuberth opened 3 years ago

sschuberth commented 3 years ago

In addition to security vulnerabilities the advisor could also advise about the general quality of an Open Source project, e.g. using

by extending https://github.com/oss-review-toolkit/ort/blob/19c89ff9a0a7aa2a52d85c82fd477531da1ecf3d/model/src/main/kotlin/AdvisorCapability.kt#L31-L37 with HEALTH or so.

sschuberth commented 3 years ago

Somewhat related is the criticality score of Open Source projects: https://github.com/ossf/criticality_score

dgutson commented 1 year ago

I this should be splitted in the different tools. We are interested in Google Scorecard.

sschuberth commented 1 year ago

I this should be splitted in the different tools. We are interested in Google Scorecard.

@dgutson, please indicate your interest by adding 👍🏻 to the top post, as that way we can rank the issues.