OpenTeams Score: A Way to Assess Open Source Projects

on YouTube ↗07m

" summary

OpenTeams Score assesses open source projects using five concrete components: popularity, community, security, license permissiveness and versioning. It pulls data from GitHub + package managers + Twitter + Stack Overflow and uses Security Scorecard for security signals. A dashboard proof of concept scores projects by converting component values to z-score normalization and the team reports having scored 1200 projects. Project pages and a GitHub repo are available so the system can be inspected and improved.

AI-written summary · about

" related talks

• 27mHow Do You Trust Your Open Source Software?Naveen Srinivasan, Brian Russell · CloudNativeSecurityCon North America 2023
• 25mHow do you trust your open source software?Naveen Srinivasan, Brian Russell · BSidesSF 2023
• 27mAn Open Book Test: Securing Open Source Software With OpenSSF’s ScorecardStephen Augustus · Philly ETE 2023
• 31mAssessing Open Source Software Projects in the Software Supply ChainScott Hissam, Joshua "CoCo" Crisp · SOSS Fusion 2024
• 45mWhat’s Going On In A FOSS Project?Harish Pillay · FUDCon Pune 2015
• 41mBack to Security Basics: Evaluating, Consuming, and Contributing Open Source...Katherine Druckman · SupplyChainSecurityCon @ Open Source Summit Europe 2024
• 31mScorecard at Scale: Old and New Possibilities for Lifting Security on All RepositoriesStephen Augustus, Jeff Mendoza · SOSS Fusion 2024
• 42mAssessing the Risk of Open-source Components Using OpenSSF's ScorecardLaurent Simon, Naveen Srinivasan · SupplyChainSecurityCon at Open Source Summit North America 2022