Planning and roadmap for future Ecosyste.ms development
Ecosyste.ms presents open datasets and APIs that perform dependency mapping (i.e. identifying key software systems where open source software is critical) of the OSS ecosystem to determine which projects are most critical and most in need of support.
The project builds on the ideas of an earlier tool libraries.io, but focuses more on expanding available data and APIs to take it to the next level. This tool provides a foundational basis for researchers to better analyze OSS and for funders to better prioritize which projects most need to be funded.
Check out the initial roadmap proposal from 2022 here: https://github.com/ecosyste-ms/.github/files/8815813/Ecosystems.Proposal.3.pdf
- A comprehensive set of APIs for parsing and querying open source package manager metadata from across many software ecosystems
- Up-to-date, easily accessible open data for each software ecosystem
- Individual open source services that can be deployed or consumed for a variety of use cases related to the sustainability of open source software.
The core of the project is made up of lots of small services, these can be used independently or combined together to form more powerful pipelines and datasets.
Package, version and dependency metadata of many open source software ecosystems and registries.
The timeline of over 6 Billion events for every public repo on GitHub, all the way back to 2015.
Parse dependency metadata from many open source software ecosystems manifest files.
Inspecting package archives and files from many open source software ecosystems.
Digests of packages from many open source software ecosystems.
Generate diffs between package releases for many open source software ecosystems.
Parse license metadata from many open source software ecosystems.
Repository metadata for many open source software ecosystems.
Resolve full dependency trees for many open source software ecosystems.
Security vulnerability metadata for many open source software ecosystems.
Commit metadata for open source projects.
Discovering and rendering README files for open source projects.
Support for system package managers like apt, yum, dpkg and pacman in Packages.
Test the reproducability of packages by automatically rebuilding from source and comparing.
Please do! The source code is hosted at GitHub. If you want something, open an issue or a pull request.
If you need want to contribute but don't know where to start, take a look at the issues tagged as "Help Wanted".
You can also help triage issues. This can include reproducing bug reports, or asking for vital information such as version numbers or reproduction instructions.
Finally, this is an open source project. If you would like to become a maintainer, we will consider adding you if you contribute frequently to the project. Feel free to ask.
For other updates, follow the project on Twitter: @ecosyste_ms.
- Fork the project.
- Make your feature addition or bug fix.
- Send a pull request. Bonus points for topic branches.
We support and encourage security research on Ecosyste.ms under the terms of our vulnerability disclosure policy.
Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.
GNU Affero License © 2022 Andrew Nesbitt.
