search

ossf / census

📜Automated review of open source software projects
Other
115 stars 30 forks source link

separate risk index computation into configuration #32

Open sbenthall opened 8 years ago

sbenthall commented 8 years ago

Currently the risk index is computed with point values for code features hard coded into the script:

https://github.com/linuxfoundation/cii-census/blob/master/oss_package_analysis.py#L313

In the interest of having the risk index be something that can be trained based on scientific evaluation of open source communities, it would be better if these values were configurable rather than being hard-coded.

david-a-wheeler commented 8 years ago

Fair enough. Any particular preferences on how, or what format to use?

david-a-wheeler commented 8 years ago

Issue #40 may be a way to implement this - thoughts?

We expressly didn't using training algorithms because there's no "truth" value to train against. If there is such a dataset, I'd love to know about it.