Census Project – Identifying popular open-source projects that are at risk

https://www.coreinfrastructure.org/programs/census-project

by walterbell • 11 years ago

68 7 11 years ago

coreinfrastructure.org

dang• 11 years ago

Url changed from http://www.infoworld.com/article/2946566/security/core-linux..., which points to this.

dferlemann• 11 years ago

Great work! Very useful! It would be nice to have quick search filtering feature though.

phkahler• 11 years ago

I thought the headline meant existential risk, but they seem to be talking about security/vulnerability stuff.

walterbell• 11 years ago

This is trying to avoid a repeat of Heartbleed:

"CII ... a Linux Foundation effort assembled in the wake of the Heartbleed fiasco to provide development support for key Internet protocols, has opened the doors on its Census Project -- an effort to figure out what projects need support now, instead of waiting for them to break ... the programs most in need of attention are not previously cited infrastructure projects, but common core Linux system utilities that have network access and little development activity around them."

Top 10 at-risk programs:

  ftp
  netcat-traditional
  tcpd
  whois
  at
  libwrap0
  traceroute
  xauth
  bzip2
  hostname

untog• 11 years ago

I'd love to see the number of on that - popular projects that have lost contributors, slowed down, etc.

Though I suppose some projects naturally slow down when things are working well.

caseysoftware• 11 years ago

Ohloh - now OpenHub - gives some great metrics on some of those aspects and even lets you compare projects : https://www.openhub.net/

Immortalin• 11 years ago

One project which really needs contributors now is the Mitro Password Manager, it is shutting down due to lack of funding. https://github.com/mitro-co/mitro

Census Project – Identifying popular open-source projects that are at risk

Related Stories