anchor.diff:  
   One of the main sources used by SCOWL is Alan Beale 12Dicts package.
   
  -One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,5,6,8111,Perl,BSD-3-Clause mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,155222,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,101661,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,116688,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,5,6,8111,Perl,BSD-3-Clause mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,140676,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,84845,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,98024,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +xkb-data,xkeyboard-config,2.5.1-3,X Keyboard Extension (XKB) configuration data,http://www.freedesktop.org/Software/XKeyboardConfig,0,https://security-tracker.debian.org/tracker/source-package/xkeyboard-config,https://www.openhub.net/projects/xkeyboard-config,xkeyboard-config,"The non-arch keyboard configuration database for X Window. The goal is to provide the consistent, well-structured, frequently released open source of X keyboard configuration data for X Window System implementations (free, open source and commercial). The project is targeted to XKB-based systems.",http://freedesktop.org/wiki/Software/XKeyboardConfig,http://freedesktop.org/wiki/Software/XKeyboardConfig#line-26,14,94,9579,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",141833,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
   task-web-server,tasksel,3.14.1,Web server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
   
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",14292,,Program,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 0 , Data only: 0",
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",13505,,program,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 0 , Data only: 0",
  
positive.code: 
  It provides standard crypto blocks for: AES, Camellia, SHA-1, SHA-256, SHA512, X.509 certificates, etc. as well as higher lever protocols: SSL v3, TLS v1.0, TLS v1.1 and TLS v1.2.
  
  PolarSSL has been ported on a number of architectures, including ARM, PowerPC, MIPS, and Motorola 68000. Its already small memory footprint can be easily reduced to 50k for a basic SSL client or server, by modifying a single .h configuration file. PolarSSL is currently used in several open-source (GPL) and closed-source projects, such as Adobe's flash player.",https://polarssl.org,https://polarssl.org/download,17,27,78084,C,commercial_license gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",38,,,1,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",SSL/TLS library.  Protocol is important.  This implementation is less widely used.
  yum,,3.2.25-2,Advanced front-end for rpm,http://yum.baseurl.org/,1,https://security-tracker.debian.org/tracker/source-package/yum,https://www.openhub.net/projects/yum,yum,Yum is an automatic updater and package installer/remover for rpm systems. It automatically computes dependencies and figures out what things should occur to install packages. It makes it easier to maintain groups of machines without having to manually update each one using rpm.,http://yum.baseurl.org/,http://yum.baseurl.org/wiki/releases,3,98,148840,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,766,,Program,1,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 4, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","This is used by RPM-based systems to download/install programs.
  It is anticipated that this will be replaced with DNF in
  Fedora at least (https://lwn.net/Articles/580223/)."
  clamav,,0.98.5+dfsg-0+deb7u1,anti-virus utility for Unix - command-line interface,http://www.clamav.net/,33,https://security-tracker.debian.org/tracker/source-package/clamav,https://www.openhub.net/projects/clamav,Clam AntiVirus,"Clam AntiVirus (ClamAV) is an anti-virus toolkit for Unix. The main purpose of this software is the integration with mail servers (attachment scanning). The package provides a flexible and scalable multi-threaded daemon, a commandline scanner, and a tool for automatic updating via Internet. The programs are based on a shared library distributed with the Clam AntiVirus package, which you can use in your own software.",https://github.com/vrtadmin/clamav-devel,https://github.com/vrtadmin/clamav-devel/downloads,8,163,2910592,C++,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",13561,C,,1,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",
  subversion,,1.6.17dfsg-4+deb7u6,Advanced version control system,http://subversion.apache.org/,30,https://security-tracker.debian.org/tracker/source-package/subversion,https://www.openhub.net/projects/subversion,Apache Subversion,"Subversion has rapidly become the version control standard and it is rapidly replacing open source and commercial solutions around the world.
  Subversion enables globally distributed software development teams to efficiently version and share source code. The open source Subversion project was started in early 2000 by CollabNet, the primary corporate sponsor of Subversion.
  
  
negative.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153436,c,program,1,0,0,8,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0",Vital for security. CII already investing in this. ++
  openssh-server,openssh,1:6.0p1-4+deb7u2,"secure shell (SSH) server, for secure access from remote machines",http://www.openssh.org/,13,https://security-tracker.debian.org/tracker/source-package/openssh,https://www.openhub.net/projects/openssh,OpenSSH,"OpenSSH is a free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer.
  
  The following is a list of OpenSSH features:
  