microsoft / microsoft/OSSGadget
Improve the risk calculation algorithm
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 371
- Forks
- 58
- PR merge metrics
- No merged PRs in 30d
Description
The risk calculation algorithm (in oss-risk-calculator) is pretty basic, combining project health (from oss-health) and the number of high-risk characteristics (from oss-characteristic), then normalizing to a range of 0 to 1.
I think this could be improved significantly, but would require a good amount of "think" time. If anyone is interested in contributing, it'd be very much appreciated.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading the oss-risk-calculator entry point and tracing how it combines oss-health with the high-risk characteristics from oss-characteristic. Review the current normalization to 0–1, then define and implement a better-supported calculation whose expected behavior and output range can be verified.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100