Census Project – Identifying popular open-source projects that are at risk | Hacker News Reader

Census Project – Identifying popular open-source projects that are at risk

coreinfrastructure.org

68 pointswalterbell7 comments

I thought the headline meant existential risk, but they seem to be talking about security/vulnerability stuff.

This is trying to avoid a repeat of Heartbleed:

"CII ... a Linux Foundation effort assembled in the wake of the Heartbleed fiasco to provide development support for key Internet protocols, has opened the doors on its Census Project -- an effort to figure out what projects need support now, instead of waiting for them to break ... the programs most in need of attention are not previously cited infrastructure projects, but common core Linux system utilities that have network access and little development activity around them."

Top 10 at-risk programs:

  ftp
  netcat-traditional
  tcpd
  whois
  at
  libwrap0
  traceroute
  xauth
  bzip2
  hostname

I'd love to see the number of on that - popular projects that have lost contributors, slowed down, etc.

Though I suppose some projects naturally slow down when things are working well.

One project which really needs contributors now is the Mitro Password Manager, it is shutting down due to lack of funding. https://github.com/mitro-co/mitro

Ohloh - now OpenHub - gives some great metrics on some of those aspects and even lets you compare projects : https://www.openhub.net/

Great work! Very useful! It would be nice to have quick search filtering feature though.

Url changed from http://www.infoworld.com/article/2946566/security/core-linux..., which points to this.

Reply on news.ycombinator.com