Yesterday's discussion: https://news.ycombinator.com/item?id=25381397

More discussion from earlier: https://news.ycombinator.com/item?id=25381397

Top-scored projects: https://commondatastorage.googleapis.com/ossf-criticality-sc...

For JS:

    node│https://github.com/nodejs/node│JavaScript│73│0│3226│10│64.7│63│1517│2055│4.1│1049988│0.98421
    react-native│https://github.com/facebook/react-native│JavaScript│71│0│2866│5│50.5│15│778│1694│3.1│223266│0.90739
    react│https://github.com/facebook/react│JavaScript│91│0│1609│6│20.9│6│692│973│3.8│333619│0.88497
    gatsby│https://github.com/gatsbyjs/gatsby│JavaScript│67│0│3873│3│83.3│2│2181│2526│1.9│1182047│0.88256
    three.js│https://github.com/mrdoob/three.js│JavaScript│130│0│1694│8│64.3│12│606│801│3.1│22919│0.87813
    bootstrap│https://github.com/twbs/bootstrap│JavaScript│113│0│1360│7│21.7│9│729│912│2.1│149666│0.8661
    material-ui│https://github.com/mui-org/material-ui│JavaScript│76│0│2256│7│53.8│43│1561│1826│2.9│5386│0.86336
    odoo│https://github.com/odoo/odoo│JavaScript│79│0│1761│4│131.1│0│6105│7104│1.9│50311│0.83304
    next.js│https://github.com/vercel/next.js│JavaScript│50│0│1415│5│54.6│426│1596│2194│3.0│4303│0.82498
    Rocket.Chat│https://github.com/RocketChat/Rocket.Chat│JavaScript│67│0│773│4│28.8│135│1242│2002│1.4│50918│0.81605
    cypress│https://github.com/cypress-io/cypress│JavaScript│70│0│235│5│27.7│29│934│1573│2.5│78962│0.81284
    amphtml│https://github.com/ampproject/amphtml│JavaScript│64│0│1055│8│56.7│118│1317│1848│1.6│1762│0.80656
    amphtml│https://github.com/ampproject/amphtml│JavaScript│64│0│1055│8│56.7│118│1317│1848│1.6│1762│0.80656
    amphtml│https://github.com/ampproject/amphtml│JavaScript│64│0│1055│8│56.7│118│1317│1847│1.6│1762│0.80655

that's a bug for 'amphtml' rite?

Debian's popcon seems like a useful input to this sort of work?

Finally, left-pad is going to get properly funded :-D