ossf / census

📜Automated review of open source software projects
Other
116 stars 30 forks source link

Consider reporting each part of the risk index's value in the result #29

Open david-a-wheeler opened 9 years ago

david-a-wheeler commented 9 years ago

Currently the results file reports the final risk index, but not the breakdown of how the score was derived. You can figure it out from the other data, but it might be better to report the specific values as well.

This could be reported as a bunch of new columns, one for each value. That would be easy to import into SQL and search on, for example. If that's a pain, it could be reported in the form "0+2+0+1+1..."; each of the values could be in a specific order.

This is inspired from Nathan Willis's article in LWN.net; see https://lwn.net/Articles/651268/ which says, "Regrettably, the raw numbers that make up each package's score do not appear to be available. It would have been interesting to see the exact point values assigned for number of contributors, for example."

skhakimov commented 9 years ago

Implemented in the develop branch.

david-a-wheeler commented 9 years ago

Excellent. I think that will help address issues like issue #1 ... that will make it MUCH easier to see why a score came out a certain way.