anchor.diff:      * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
       * SFTP client and server support in both SSH1 and SSH2 protocols.
       * Kerberos and AFS Ticket Passing
  -    * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,25,92,64718,C,BSD-3-Clause ,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",132473,,Application Data,0,0,0,3,
  -python-soappy,,0.12.0-4,SOAP Support for Python,http://pywebsvcs.sourceforge.net/,2,https://security-tracker.debian.org/tracker/source-package/python-soappy,https://www.openhub.net/projects/python-soappy,python-soappy,,,,0,7,8587,Python,,Stable Y-O-Y development activity,Well-established codebase,Average number of code comments,No recent development activity,122669,,Application Data,1,0,0,3,
  -sysv-rc,sysvinit,2.88dsf-41+deb7u1,System-V-like runlevel change mechanism,http://savannah.nongnu.org/projects/sysvinit,0,https://security-tracker.debian.org/tracker/source-package/sysvinit,https://www.openhub.net/projects/sysvinit,sysvinit,"The Sysvinit package contains programs for controlling the startup, running, and shutdown of the system.",http://savannah.nongnu.org/projects/sysvinit,,1,2,8054,C,gpl ,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,Only a single active developer,169739,,Application Data,0,0,0,3,
  -task-english,tasksel,3.14.1,General English environment,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  -
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,7,132,2062,Perl,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",50189,,,0,0,0,3,
  -tzdata,,2014h-0wheezy1,time zone and daylight-saving time data,http://www.iana.org/time-zones,0,https://security-tracker.debian.org/tracker/source-package/tzdata,,,,,,,,,,,,,,,169781,,Application Data,0,0,0,3,
  -util-linux-locales,util-linux,2.20.1-5.3,Locales files for util-linux,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,86,384,116273,C,bsd gpl3_or_later lgpl21_or_later Public_Domain ,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",89412,,Application Data,0,0,0,3,
  -vim-common,vim,2:7.3.547-7,Vi IMproved - Common files,http://www.vim.org/,1,https://security-tracker.debian.org/tracker/source-package/vim,https://www.openhub.net/projects/vim,Vim,"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. It's useful whether you're already using vi or using a different editor.",http://www.vim.org/,http://www.vim.org/download.php,1,12,840554,C,Vim_License ,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,168687,,Application Data,0,0,0,3,
  -xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,101661,,Application Data,0,0,0,3,
  -xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,116688,,Application Data,0,0,0,3,
  +    * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",132473,,Application Data,0,0,0,0,
  +tasksel-data,tasksel,3.14.1,Official tasks used for installation of Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  +
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",164602,,Application Data,0,0,0,0,
  +tzdata,,2014h-0wheezy1,time zone and daylight-saving time data,http://www.iana.org/time-zones,0,https://security-tracker.debian.org/tracker/source-package/tzdata,,,,,,,,,,,,,,,169781,,Application Data,0,0,0,0,
  +wamerican,scowl,7.1-1,American English dictionary words for /usr/share/dict,http://wordlist.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/scowl,https://www.openhub.net/projects/scowl,SCOWL (and friends),"SCOWL (Spell Checker Oriented Word Lists) is a database of English words that can be used to create word lists suitable for use in spell checkers of various sizes and dialects (America, British (both -ise and -ize) and Canadian). However, I am sure it will have numerous other uses as well.
  +
  +The main product of SCOWL are spell checker dictionaries for Hunspell and Aspell.
  +
  +SCOWL was created by carefully combing many other high quality wordlists. The creation of SCOWL also lead to many other useful artifacts.
  +
  +One of the main sources used by SCOWL is Alan Beale 12Dicts package.
  +
  +One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,5,6,8111,Perl,BSD-3-Clause mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,155222,,Application Data,0,0,0,0,
  +xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,101661,,Application Data,0,0,0,0,
  +xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,116688,,Application Data,0,0,0,0,
   task-web-server,tasksel,3.14.1,Web server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
   
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,7,132,2062,Perl,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",14292,,Program,0,0,0,3,
  -debconf-i18n,debconf,1.5.49,full internationalization support for debconf,,0,https://security-tracker.debian.org/tracker/source-package/debconf,https://www.openhub.net/projects/debconf,debconf,,,,4,21,9380,Perl,,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,168799,,Application Data,0,0,0,2,
  -gcc-4.6-base,gcc-4.6,4.6.3-14,"GCC, the GNU Compiler Collection (base package)",http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,205,538,6946142,C,gpl3_or_later ,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",48090,,Application Data,0,0,0,2,
  -ienglish-common,ispell,3.3.02-6,Common files for British and American ispell dictionaries,http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,59098,,Application Data,0,0,0,2,
  -libsemanage-common,libsemanage,2.1.6-6,Common files for SELinux policy management libraries,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsemanage,https://www.openhub.net/projects/libsemanage,libsemanage,An interface for SELinux management,https://github.com/pld-linux/libsemanage,,1,9,0,,,Stable Y-O-Y development activity,"Mature, well-established codebase",,Only a single active developer,136084,,Application Data,0,0,1,2,
  -iso-codes,,3.41-1,"ISO language, territory, currency, script codes and their translations",http://pkg-isocodes.alioth.debian.org/,0,https://security-tracker.debian.org/tracker/source-package/iso-codes,https://www.openhub.net/projects/iso-codes,iso-codes,"This package provides the ISO-639 Language code list, the ISO-4217 currency list, the ISO-3166 Territory code list, and ISO-3166-2 sub-territory lists.
  -It also (more importantly) provides their translations in .po form.",http://pkg-isocodes.alioth.debian.org/,http://pkg-isocodes.alioth.debian.org/,3,67,121687,shell script,lgpl ,,,,,151137,,Standalone Data,0,0,0,1,
  -tasksel-data,tasksel,3.14.1,Official tasks used for installation of Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  -
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,7,132,2062,Perl,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",164602,,Application Data,0,0,0,1,
  -wamerican,scowl,7.1-1,American English dictionary words for /usr/share/dict,http://wordlist.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/scowl,https://www.openhub.net/projects/scowl,SCOWL (and friends),"SCOWL (Spell Checker Oriented Word Lists) is a database of English words that can be used to create word lists suitable for use in spell checkers of various sizes and dialects (America, British (both -ise and -ize) and Canadian). However, I am sure it will have numerous other uses as well.
  -
  -The main product of SCOWL are spell checker dictionaries for Hunspell and Aspell.
  -
  -SCOWL was created by carefully combing many other high quality wordlists. The creation of SCOWL also lead to many other useful artifacts.
  -
  -One of the main sources used by SCOWL is Alan Beale 12Dicts package.
  -
  -One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,3,4,7536,Perl,BSD-3-Clause mit ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Small development team,155222,,Application Data,0,0,0,1,
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",14292,,Program,0,0,0,0,
  
positive.code:  paste pathchk pinky pr printenv printf ptx pwd readlink rm rmdir runcon
   sha*sum seq shred sleep sort split stat stty sum sync tac tail tee test
   timeout touch tr true truncate tsort tty uname unexpand uniq unlink
   users vdir wc who whoami yes",http://savannah.gnu.org/projects/coreutils/,,39,166,84879,C,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",169897,C,,0,0,1,7,"Vital software for a running system.  Active maintenance.  Includes many subcomponents; some components might need review, but hard to tell because they're managed as a group."
  cpio,,2.11+dfsg-0.1,GNU cpio -- a program to manage archives of files,http://www.gnu.org/software/cpio/,3,https://security-tracker.debian.org/tracker/source-package/cpio,https://www.openhub.net/projects/cpio,GNU cpio,GNU cpio is an archiver program that handles cpio and tar archives.,http://savannah.gnu.org/projects/cpio/,,1,5,6744,C,gpl3_or_later ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,169606,C,,0,1,0,7,"Decompression software. Isolated cpio format uncommon today, but RPMs are based on it."
  dc,bc (1.06.95-2),1.06.95-2+b1,The GNU dc arbitrary precision reverse-polish calculator,,0,https://security-tracker.debian.org/tracker/source-package/bc,,,,,,,,,,,,,,,149809,,,0,0,0,7,Use relatively rare.  Unlikely to process data from attacker.
  debianutils,,4.3.2,Miscellaneous utilities specific to Debian,,0,https://security-tracker.debian.org/tracker/source-package/debianutils,https://www.openhub.net/projects/debian-installer-utils,debian-installer-utils,,,,6,89,1170,shell script,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,169899,C,Program,0,0,0,7,"Collection of small tools.The tempfile(1) command is security-relevant (temp file mistakes are a common security vulnerability) but is relatively small, and usually the problem is a failure to use tempfile(1) or similar."
  discover,,2.1.2-5.2,hardware identification system,,0,https://security-tracker.debian.org/tracker/source-package/discover,,,,,,,,,,,,,,,148431,,Program,0,0,0,7,"Conceivably a local exploit opportunity, but not likely."
  gnupg,,1.4.12-7+deb7u6,GNU privacy guard - a free PGP replacement,http://www.gnupg.org,7,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,14,32,203017,C,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",169880,C,,0,1,0,7,Vital for protecting email (CII has already invested with a one-time investment) ++
  gpgv,gnupg,1.4.12-7+deb7u6,GNU privacy guard - signature verification tool,http://www.gnupg.org,7,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,14,32,203017,C,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",169785,C,,0,1,0,7,Vital for protecting email (CII has already invested with a one-time investment) ++
  gzip,,1.5-1.1,GNU compression utilities,,1,https://security-tracker.debian.org/tracker/source-package/gzip,https://www.openhub.net/projects/gzip,gzip,gzip (GNU zip) is a compression utility designed to be a replacement for compress. Its main advantages over compress are much better compression and freedom from patented algorithms. It has been adopted by the GNU project and is now relatively popular on the Internet.,http://www.gnu.org/software/gzip/,,2,15,8553,C,gpl ,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Small development team,169892,C,,0,1,0,7,"Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. http://www.gnu.org/software/gzip/ Maintained on Savannah (http://savannah.gnu.org/projects/gzip/) using git. Last formal release was years ago (June 2013).  Multiple contributors, but not many. Current git contributions, but only a few a month (2015-02-08, 2015-01-02, 2014-11-10, 2014-10-10), and most seem to be small/trivial (document and syntax tweaks). +++"
  krb5-locales,krb5,1.10.1+dfsg-5+deb7u2,Internationalization support for MIT Kerberos,http://web.mit.edu/kerberos/,43,https://security-tracker.debian.org/tracker/source-package/krb5,https://www.openhub.net/projects/kerberos,Kerberos,Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.,http://web.mit.edu/Kerberos/,http://web.mit.edu/Kerberos/dist/index.html,26,91,386862,C,mit ,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",126554,,,0,1,0,7,Important for Kerberos.
  laptop-detect,,0.13.7,attempt to detect a laptop,,0,https://security-tracker.debian.org/tracker/source-package/laptop-detect,,,,,,,,,,,,,,,162766,,,0,0,0,7,Unlikely to be a security vulnerability
  libapt-inst1.5,apt,0.9.7.9+deb7u6,deb package format runtime library,,15,https://security-tracker.debian.org/tracker/source-package/apt,https://www.openhub.net/projects/apt,apt - Advanced Package Tool,"Debian's next generation front-end for the dpkg package manager. It provides the apt-get utility and APT dselect method that provides a simpler, safer way to install and upgrade packages.
  
  APT features complete installation ordering, multiple source capability
  and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,43,117,66370,C++,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",134727,,Shared Library,0,1,0,7,"Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  libapt-pkg4.12,apt,0.9.7.9+deb7u6,package managment runtime library,,15,https://security-tracker.debian.org/tracker/source-package/apt,https://www.openhub.net/projects/apt,apt - Advanced Package Tool,"Debian's next generation front-end for the dpkg package manager. It provides the apt-get utility and APT dselect method that provides a simpler, safer way to install and upgrade packages.
  
  APT features complete installation ordering, multiple source capability
  and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,43,117,66370,C++,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",135135,,Shared Library,0,1,0,7,"Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  libattr1,attr,1:2.4.46-8,Extended attribute shared library,http://savannah.nongnu.org/projects/attr/,0,https://security-tracker.debian.org/tracker/source-package/attr,https://www.openhub.net/projects/attr,Linux Extended Attributes,"A set of tools for manipulating extended attributes on filesystem objects, in particular getfattr(1) and setfattr(1).
  An attr(1) command is also provided which is largely compatible with the SGI IRIX tool of the same name.",http://savannah.nongnu.org/projects/attr,http://savannah.nongnu.org/files/?group=attr,6,27,2797,C,gpl ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,169897,C,Shared Library,0,0,1,7,Actual acl checking implemented by the kernel.
  libcap2,,1:2.22-1.2,support for getting/setting POSIX.1e capabilities,http://sites.google.com/site/fullycapable/,1,https://security-tracker.debian.org/tracker/source-package/libcap2,https://www.openhub.net/projects/libcap,libcap,libcap implements the user-space interfaces to the POSIX 1003.1e capabilities available in Linux kernels. These capabilities are a partitioning of the all powerful root privilege into a set of distinct privileges.,https://sites.google.com/site/fullycapable/,,5,19,3461,C,BSD-3-Clause ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,166557,C,Shared Library,0,0,1,7,Implemented by kernel.  Less likely to have issues here.
  libexpat1,expat,2.1.0-1+deb7u1,XML parsing C library - runtime library,http://expat.sourceforge.net,4,https://security-tracker.debian.org/tracker/source-package/expat,https://www.openhub.net/projects/expat,Expat XML Parser,"Expat is a fast, non-validating, stream-oriented XML parsing library.",http://expat.sourceforge.net,http://sourceforge.net/project/showfiles.php?group_id=10127,0,10,22710,C,mit ,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,No recent development activity,168755,C,Shared Library,0,1,0,7,"Parses potentially-dangerous data. This is an XML parser library written in C. Maintenance appears to have effectively halted after its 2012 release. Project at: http://www.libexpat.org/ (It was at, http://expat.sourceforge.net/ and its movement is not obvious, so some may be using an older version; this was follow-on from James Clark's original Expat). On 24 March 2012 Expat 2.1.0 released, it includes security vulnerability fixes for 5 CVEs; Previous release was 2007. ""Bug reports"" produces error page - tracking does not seem to work.  No public mailing list. CVS browsing suggests little or no activity after 2012 (and little before that). Many systems build on top of this library. Note that this doesn't support XML 1.1. +++"
  libffi5,libffi,3.0.10-3,Foreign Function Interface library runtime,,0,https://security-tracker.debian.org/tracker/source-package/libffi,https://www.openhub.net/projects/11338,libffi,"Compilers for high level languages generate code that follows certain conventions. These conventions are necessary, in part, for separate compilation to work. One such convention is the ""calling convention"". The ""calling convention"" is a set of assumptions made by the compiler about where function arguments will be found on entry to a function. A ""calling convention"" also specifies where the return value for a function is found.
  
  The libffi library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run-time.",http://sourceware.org/libffi,http://sourceware.org/libffi,28,56,45759,C,BSD-3-Clause ,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",117671,C,Shared Library,0,1,0,7,Development tool library. Somewhat less likely to contain vulnerabilities directly.
  libfontenc1,libfontenc,1:1.1.1-1,X11 font encoding library,,0,https://security-tracker.debian.org/tracker/source-package/libfontenc,,,,,,,,,,,,,,,123044,,Shared Library,0,0,0,7,Less likely to be a security vulnerability.
  libfreetype6,freetype,2.4.9-1.1,"FreeType 2 font engine, shared library files",http://www.freetype.org,45,https://security-tracker.debian.org/tracker/source-package/freetype,https://www.openhub.net/projects/freetype,The FreeType Project,"FreeType 2 is a software font engine that is designed to be small,
  efficient, highly customizable and portable while capable of
  producing high-quality output (glyph images). It can be used in
  graphics libraries, display servers, font conversion tools, text
  
negative.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",140377,,Application Data,0,0,0,0,
  openssh-blacklist-extra,openssh-blacklist,0.4.1+nmu1,list of non-default blacklisted OpenSSH RSA and DSA keys,,0,https://security-tracker.debian.org/tracker/source-package/openssh-blacklist,https://www.openhub.net/projects/openssh,OpenSSH,"OpenSSH is a free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer.
  
  The following is a list of OpenSSH features:
  