Gives criticality score for an open source project
This project is maintained by members of the
Securing Critical Projects WG.
Goals
-
Generate a criticality score for every open source project.
-
Create a list of critical projects that the open source community depends on.
-
Use this data to proactively improve the security posture of these critical projects.
Criticality Score
A project’s criticality score defines the influence and importance of a project.
It is a number between
0 (least-critical) and 1 (most-critical). It is based on the following
algorithm
by Rob Pike:
We use the following parameters to derive the criticality score for an
open source project:
Parameter (Si) |
---|