I imagine Google's criticality score for my project is near zero. I was extremely pleased that it worked of course, but disappointed that my project continues to look like it's dead. They therefore filed zero bugs, and it resulted in zero activity for my project. Turns out they just had to set some configuration flags and everything worked fine. When randomly searching a while back, I found a blog post someone wrote about getting my project running on Arduino, something I had never tried. I get nearly zero bugs filed when people port it to esoteric platforms. With one of my open source projects I've got to extreme lengths to test it under a huge number of compiler configurations, so it compiles on anything with no warnings. The activity metric is especially frustrating because it seems to me that the higher quality a project is, the less bugs will be filed, and so the less activity will result. This approach misses 'end user' packages such as browsers and QEMU, but provides some insight into high value targets.įor end user packages, Debians 'popularity contest' can be useful: (if (string-prefix? 'python-' (package-name package)) (GCC, glibc and binutils are missing for complicated reasons, but should be up there with Guile)īy changing (all-packages) on line 26 to: Running it takes about 16 seconds on my laptop, and piping to 'grep -v bootstrap | sort -rn | tail -n 20' gives: I wrote a script that lists the number of dependents for each package in Guix by traversing the package graphs: One cool feature of functional package managers such as Nix and Guix is that the dependency graphs are entirely transparent and can be inspected programmatically. Note: check what happens with a stable project (no new issue and PR). For example, if the top 5 contributors are from Google, it's likely it's sponsored by it(could be done during their free time but less likely). How to find it's backed by a large company ? Not sure about this, we can check if the project is part of an organization, if contributor have a company or if they have a pro account. With this calculation, I think it's more likely to find relevant projects. We could also create a global score (like you did) by using the previous score and scaling it using the dependency usage (dependents_count like you did). With this, we could find those dependencies. Very few person is using it: that's a bad sign.

For local dependency, we could increase the critical value if dependents count is low. number of contributor doing 80% of the work ? or active in the last 12 months ? commits breakdown (99% is done by one guy) ?Ī nice bonus: if we could use the tool to assess critical score for our project (not globally).

For example, Spring boot should have a very low score for me.

Best spring boot open source projects