Evaluating Security and Community Health Metrics of FOSS Repositories

Niraj Salvi; Amal Thundiyil; Seema Supe; Nataasha Raul

doi:10.36948/ijfmr.2024.v06i02.16980

Evaluating Security and Community Health Metrics of FOSS Repositories

Author(s)	Niraj Salvi, Amal Thundiyil, Seema Supe, Nataasha Raul
Country	India
Abstract	The extensive use of open-source packages in software development has greatly increased output and effectiveness. However, this development presents a challenging security environment in which vulnerabilities found in these packages can spread to other projects. To address this challenge, we suggest creating an open-source security assessment tool that has been painstakingly designed. The purpose of this tool is to assess security risks related to third-party dependencies and packages that are available on npm and GitHub. Concerns are raised by the lack of a thorough assessment because seemingly innocuous packages could be hiding vulnerabilities that could lead to significant financial losses, service interruptions, and data breaches. Within the dynamic realm of open-source packages, developers often struggle to stay up to date with the ever changing security landscape. The main difficulty with this problem is figuring out which secure packages are kept up to date and which are either showing signs of poor maintenance or contain latent vulnerabilities. Therefore, it becomes necessary to have a methodical, data-driven security evaluation tool so that developers can make informed choices about which packages to install. This project uses a wide range of parameters in an attempt to meet this requirement. These parameters allow for a quantitative evaluation of a package's security posture. They include metrics like stars, forks, resolved issues, and community engagement. Our project aims to strengthen software security measures and mitigate potential risks associated with using third-party packages by giving developers actionable insights into the security status of their dependencies.
Field	Computer > Network / Security
Published In	Volume 6, Issue 2, March-April 2024
Published On	2024-04-18
Cite This	Evaluating Security and Community Health Metrics of FOSS Repositories - Niraj Salvi, Amal Thundiyil, Seema Supe, Nataasha Raul - IJFMR Volume 6, Issue 2, March-April 2024. DOI 10.36948/ijfmr.2024.v06i02.16980
DOI	https://doi.org/10.36948/ijfmr.2024.v06i02.16980
Short DOI	https://doi.org/gtrfpm

View / Download PDF File

E-ISSN 2582-2160

doi

CrossRef DOI is assigned to each research paper published in our journal.

IJFMR DOI prefix is
10.36948/ijfmr

Downloads

Copyright Permission Form and Undertaking Form Cover Page Vol 6 Isu 2 Cover Page Vol 6 Isu 1 Cover Page Vol 5 Isu 6 Research Paper Format

All research papers published on this website are licensed under Creative Commons Attribution-ShareAlike 4.0 International License, and all rights belong to their respective authors/researchers.

CC-BY-SA

About IJFMR Fees & Payment Current Issue Publication Archive	Submit Research Paper Track Submission Status Publication Guidelines Publication Ethics Peer Review & Plagiarism	Join as a Reviewer Editors & Reviewers Reviewer Referral Program Get Reviewer Membership Certi.	Website/Journal Policies Usage Policy Content Policies Privacy Policy

Contact Us		+91-9898-5948-55	editor@ijfmr.com

International Journal For Multidisciplinary Research

A Widely Indexed Open Access Peer Reviewed Multidisciplinary Bi-monthly Scholarly International Journal

Evaluating Security and Community Health Metrics of FOSS Repositories

Share this