anchor.diff:  
   It provides standard crypto blocks for: AES, Camellia, SHA-1, SHA-256, SHA512, X.509 certificates, etc. as well as higher lever protocols: SSL v3, TLS v1.0, TLS v1.1 and TLS v1.2.
   
  -PolarSSL has been ported on a number of architectures, including ARM, PowerPC, MIPS, and Motorola 68000. Its already small memory footprint can be easily reduced to 50k for a basic SSL client or server, by modifying a single .h configuration file. PolarSSL is currently used in several open-source (GPL) and closed-source projects, such as Adobe's flash player.",https://polarssl.org,https://polarssl.org/download,17,27,78084,C,commercial_license gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",29,,devel-lib,1,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",SSL/TLS library.  Protocol is important.  This implementation is less widely used.
  -yum,,3.2.25-2,Advanced front-end for rpm,http://yum.baseurl.org/,1,https://security-tracker.debian.org/tracker/source-package/yum,https://www.openhub.net/projects/yum,yum,Yum is an automatic updater and package installer/remover for rpm systems. It automatically computes dependencies and figures out what things should occur to install packages. It makes it easier to maintain groups of machines without having to manually update each one using rpm.,http://yum.baseurl.org/,http://yum.baseurl.org/wiki/releases,3,98,148840,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,782,python,program,1,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 4, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","This is used by RPM-based systems to download/install programs.
  -It is anticipated that this will be replaced with DNF in
  -Fedora at least (https://lwn.net/Articles/580223/)."
  -openvpn,,2.2.1-8+deb7u3,virtual private network daemon,http://www.openvpn.net/,2,https://security-tracker.debian.org/tracker/source-package/openvpn,https://www.openhub.net/projects/openvpn,OpenVPN,"OpenVPN is a robust and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the Internet. OpenVPN's principal strengths include wide cross-platform portability, excellent stability, support for dynamic IP addresses and NAT, adaptive link compression, single TCP/UDP port usage, a modular design that offloads most crypto tasks to the OpenSSL library, and relatively easy installation that in most cases doesn't require a special kernel module.",http://openvpn.net,http://openvpn.net/download.html,24,81,328250,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",28165,,,1,0,0,7,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0",
  -clamav,,0.98.5+dfsg-0+deb7u1,anti-virus utility for Unix - command-line interface,http://www.clamav.net/,33,https://security-tracker.debian.org/tracker/source-package/clamav,https://www.openhub.net/projects/clamav,Clam AntiVirus,"Clam AntiVirus (ClamAV) is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.",https://github.com/vrtadmin/clamav-devel,https://github.com/vrtadmin/clamav-devel/downloads,8,163,2910592,C++,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",12595,c,program,1,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",
  +PolarSSL has been ported on a number of architectures, including ARM, PowerPC, MIPS, and Motorola 68000. Its already small memory footprint can be easily reduced to 50k for a basic SSL client or server, by modifying a single .h configuration file. PolarSSL is currently used in several open-source (GPL) and closed-source projects, such as Adobe's flash player.",https://polarssl.org,https://polarssl.org/download,17,27,78084,C,commercial_license gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",40,,devel-lib,1,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",SSL/TLS library.  Protocol is important.  This implementation is less widely used.
  +libsqlite3-0,sqlite3,3.7.13-1+deb7u1,SQLite 3 shared library,http://www.sqlite.org/,5,https://security-tracker.debian.org/tracker/source-package/sqlite3,https://www.openhub.net/projects/sqlite,SQLite,"SQLite is a small C library that implements a self-contained, embeddable, zero-configuration SQL database engine. Implements most of SQL92 and ACID (atomic, consistent, isolated, and durable) transactions; no setup or administration needed.",http://sqlite.org/,http://sqlite.org/download.html,4,30,235125,C,Public_Domain,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,174910,c,shared-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libtirpc1,libtirpc,0.2.2-5,transport-independent RPC library,,1,https://security-tracker.debian.org/tracker/source-package/libtirpc,https://www.openhub.net/projects/libtirpc,libtirpc,Libtirpc is a port of Suns Transport-Independent RPC library to Linux. It's being developed by the Bull GNU/Linux NFSv4 project. Note: The SVN Repository on this site is *not* used. Use the git://git.infradead.org/~steved/libtirpc.git GIT tree,http://sourceforge.net/projects/libtirpc,,9,31,18347,C,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",128917,,shared-lib,1,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: 0","RPC library, used by NFS."
  +libuuid1,util-linux,2.20.1-5.3,Universally Unique ID library,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175845,c,shared-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libx11-6,libx11,2:1.5.0-1+deb7u1,X11 client-side library,,4,https://security-tracker.debian.org/tracker/source-package/libx11,https://www.openhub.net/projects/libx11,libX11,git://anongit.freedesktop.org/xorg/lib/libX11,https://github.com/mirror/libX11,https://github.com/mirror/libX11/downloads,7,136,221808,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",173636,c,shared-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libxfont1,libxfont,1:1.4.5-4,X11 font rasterisation library,,8,https://security-tracker.debian.org/tracker/source-package/libxfont,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
  +
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",115152,,shared-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +linux-base,,3.5,Linux image base package,,0,https://security-tracker.debian.org/tracker/source-package/linux-base,,,,,,,,,,,,,,,166753,c,metapackage,0,0,0,7,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",These are small scripts and utilities for the Linux kernel.
  +linux-libc-dev,linux,3.2.63-2+deb7u2,Linux support headers for userspace development,,403,https://security-tracker.debian.org/tracker/source-package/linux,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
  +
  +!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",113488,,,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +login,shadow,1:4.1.5.1-1,system login tools,http://pkg-shadow.alioth.debian.org/,2,https://security-tracker.debian.org/tracker/source-package/shadow,https://www.openhub.net/projects/shadow-tool-suite,Shadow Tool Suite,"The shadow tool suite contains the following commands among others: login, passwd, useradd, groupadd.",http://pkg-shadow.alioth.debian.org/,http://pkg-shadow.alioth.debian.org/download.php,7,20,127125,C,bsd,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",175846,c,program,0,0,1,7,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Front door for local login. Has Home Page, part of shadow tool suite, Latest release May 2014, Public Repo, Somewhat active mailing list, NO issue tracker. ++"
  +mount,util-linux,2.20.1-5.3,Tools for mounting and manipulating filesystems,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175755,c,program,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +openvpn,,2.2.1-8+deb7u3,virtual private network daemon,http://www.openvpn.net/,2,https://security-tracker.debian.org/tracker/source-package/openvpn,https://www.openhub.net/projects/openvpn,OpenVPN,"OpenVPN is a robust and highly configurable VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the Internet. OpenVPN's principal strengths include wide cross-platform portability, excellent stability, support for dynamic IP addresses and NAT, adaptive link compression, single TCP/UDP port usage, a modular design that offloads most crypto tasks to the OpenSSL library, and relatively easy installation that in most cases doesn't require a special kernel module.",http://openvpn.net,http://openvpn.net/download.html,24,81,328250,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",32347,,,1,0,0,7,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0",
  +python-chardet,chardet,2.0.1-2,universal character encoding detector,http://chardet.feedparser.org/,0,https://security-tracker.debian.org/tracker/source-package/chardet,https://www.openhub.net/projects/chardet,chardet,,,,0,1,176656,XSL Transformation,,,,,,146283,python,devel-lib,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python-debianbts,,1.11,Python interface to Debian's Bug Tracking System,,0,https://security-tracker.debian.org/tracker/source-package/python-debianbts,https://www.openhub.net/projects/python-debianbts,python-debianbts,,,,2,4,281,Python,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Small development team,132254,python,program,0,0,0,7,"Website points: 1, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python2.6,,2.6.8-1.1,Interactive high-level object-oriented language (version 2.6),,26,https://security-tracker.debian.org/tracker/source-package/python2.6,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",100209,c,devel-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +python2.7,,2.7.3-6+deb7u2,Interactive high-level object-oriented language (version 2.7),,24,https://security-tracker.debian.org/tracker/source-package/python2.7,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",146101,c,shared-lib,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +qemu,,1.1.2+dfsg-6a+deb7u6,fast processor emulator,http://www.qemu.org/,66,https://security-tracker.debian.org/tracker/source-package/qemu,https://www.openhub.net/projects/qemu,QEMU,"QEMU is a generic and open source machine emulator and virtualizer.
  +
  +When used as a machine emulator, QEMU can run OSes and programs made for one machine on a different machine. By using dynamic translation, it achieves very good performance.
  +
  +When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU.",http://www.qemu.org/,http://wiki.qemu.org/Download,319,937,939991,C,bsd gpl lgpl Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",9219,,,0,0,1,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  +rpm,,4.10.0-5+deb7u1,package manager for RPM,http://rpm.org/,11,https://security-tracker.debian.org/tracker/source-package/rpm,https://www.openhub.net/projects/rpm,RPM,"The RPM Package Manager (RPM) is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating computer software packages. Each software package consists of an archive of files along with information about the package like its version, a description, and the like. There is also a library API, permitting advanced developers to manage such transactions from programming languages such as C or Python.",http://rpm.org,http://wiki.rpm.org/Download,16,102,67656,C,gpl lgpl21_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",23790,c,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","This is used by RPM-based systems to install programs.  Here we refer to the version at rpm.org (used by Fedora, Red Hat Enterprise Linux, CentOS, SUSE).  (Note that there is a fork by the original RPM maintainer (Jeff Johnson) at rpm5.org, used by some organizations.)  Has ticket tracker, many long-opened defect tickets. Latest release 2014-10-09.
  +Repo publicly available in git, see: http://rpm.org/wiki/GetSource and a number of commits in 2015 (and before)."
   subversion,,1.6.17dfsg-4+deb7u6,Advanced version control system,http://subversion.apache.org/,30,https://security-tracker.debian.org/tracker/source-package/subversion,https://www.openhub.net/projects/subversion,Apache Subversion,"Subversion has rapidly become the version control standard and it is rapidly replacing open source and commercial solutions around the world.
   Subversion enables globally distributed software development teams to efficiently version and share source code. The open source Subversion project was started in early 2000 by CollabNet, the primary corporate sponsor of Subversion.
   
  
positive.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",91824,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  tasksel-data,tasksel,3.14.1,Official tasks used for installation of Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",148804,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  tzdata,,2014h-0wheezy1,time zone and daylight-saving time data,http://www.iana.org/time-zones,0,https://security-tracker.debian.org/tracker/source-package/tzdata,,,,,,,,,,,,,,,153882,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  wamerican,scowl,7.1-1,American English dictionary words for /usr/share/dict,http://wordlist.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/scowl,https://www.openhub.net/projects/scowl,SCOWL (and friends),"SCOWL (Spell Checker Oriented Word Lists) is a database of English words that can be used to create word lists suitable for use in spell checkers of various sizes and dialects (America, British (both -ise and -ize) and Canadian). However, I am sure it will have numerous other uses as well.
  
  The main product of SCOWL are spell checker dictionaries for Hunspell and Aspell.
  
negative.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",175193,c,program,1,0,0,9,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: 0",Vital for security. CII already investing in this. ++
  openssh-server,openssh,1:6.0p1-4+deb7u2,"secure shell (SSH) server, for secure access from remote machines",http://www.openssh.org/,13,https://security-tracker.debian.org/tracker/source-package/openssh,https://www.openhub.net/projects/openssh,OpenSSH,"OpenSSH is a free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer.
  
  The following is a list of OpenSSH features:
  