anchor.diff:  more at: http://subversion.apache.org/
   
   
  -Read Submerged, a blog about Subversion at http://blogs.open.collab.net/svn",http://subversion.apache.org/,http://subversion.apache.org/packages.html,21,176,615914,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",31802,c++,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  -bzr,,2.6.0~bzr6526-1,easy to use distributed version control system,http://bazaar-vcs.org,1,https://security-tracker.debian.org/tracker/source-package/bzr,https://www.openhub.net/projects/bzr-svn,Bazaar Subversion Plugin,Plugin that provides support for Subversion branches to Bazaar.,http://bazaar-vcs.org/BzrSvn,https://launchpad.net/bzr-svn,0,37,27434,Python,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,No recent development activity,4477,python,program,0,1,0,7,"Website points: 0, CVE: 1, 12-month contributor: 5, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
  -vlc,,2.0.3-5+deb7u1,multimedia player and streamer,http://www.videolan.org/vlc/,47,https://security-tracker.debian.org/tracker/source-package/vlc,https://www.openhub.net/projects/vlc,VLC media player,"VLC - the cross-platform media player and streaming server
  -
  -VLC media player is a highly portable multimedia player for various audio and video formats (MPEG-1, MPEG-2, MPEG-4, DivX, mp3, ogg, ...) as well as DVDs, VCDs, and various streaming protocols. It can also be used as a server to stream in unicast or multicast in IPv4 or IPv6 on a high-bandwidth network.",http://videolan.org/,http://www.videolan.org/vlc/,102,709,612716,C,gpl lgpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",46901,c,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  -adduser,,3.113+nmu3,add and remove users and groups,http://alioth.debian.org/projects/adduser/,0,https://security-tracker.debian.org/tracker/source-package/adduser,https://www.openhub.net/projects/adduser,adduser,,,,0,4,2646,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,No recent development activity,153951,perl,program,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -apt-listchanges,,2.85.11,package change history notification tool,,0,https://security-tracker.debian.org/tracker/source-package/apt-listchanges,https://www.openhub.net/projects/8066,apt-listchanges,"apt-listchanges is a tool to show what has been changed in a new
  - version of a Debian package, as compared to the version currently
  - installed on the system.  It does this by extracting the relevant
  - entries from the Debian changelog file, and the NEWS.Debian file.
  - .
  - It can be run on several .deb archives at a time to get a list of all
  - of the changes that would be effected by installing or upgrading a
  - group of packages.  It can be configured to do this automatically
  - during upgrades using apt.",http://packages.debian.org/apt-listchanges,http://packages.debian.org/apt-listchanges,0,2,994,Python,gpl,,,,,122565,python,program,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -bc,bc (1.06.95-2),1.06.95-2+b1,The GNU bc arbitrary precision calculator language,,0,https://security-tracker.debian.org/tracker/source-package/bc,,,,,,,,,,,,,,,138641,c,program,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",Use relatively rare.  Unlikely to process data from attacker.
  -bsdutils,util-linux (2.20.1-5.3),1:2.20.1-5.3,Basic utilities from 4.4BSD-Lite,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/Util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153958,c,program,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -busybox,,1:1.20.0-7,Tiny utilities for small and embedded systems,http://www.busybox.net,5,https://security-tracker.debian.org/tracker/source-package/busybox,https://www.openhub.net/projects/busybox,BusyBox,"BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. The utilities in BusyBox generally have fewer options than their full-featured GNU cousins; however, the options that are included provide the expected functionality and behave very much like their GNU counterparts. BusyBox provides a fairly complete environment for any small or embedded system.
  -
  -BusyBox has been written with size-optimization and limited resources in mind. It is also extremely modular so you can easily include or exclude commands (or features) at compile time. This makes it easy to customize your embedd",http://busybox.net/,http://busybox.net/download.html,41,250,175036,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",151157,,program,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -hostname,,3.11,utility to set/show the host name or domain name,,0,https://security-tracker.debian.org/tracker/source-package/hostname,,,,,,,,,,,,,,,153957,c,program,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",Relatively small functionality.
  -installation-report,,2.49,system installation report,,0,https://security-tracker.debian.org/tracker/source-package/installation-report,https://www.openhub.net/projects/installation-report,installation-report,,,,2,66,468,shell script,,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,147467,shell,program,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -less,,444-4,pager program similar to more,http://www.greenwoodsoftware.com/less/,1,https://security-tracker.debian.org/tracker/source-package/less,,,,,,,,,,,,,,,149524,c,program,0,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",Less likely to be a security vulnerability :-).
  -libacl1,acl,2.2.51-8,Access control list shared library,http://savannah.nongnu.org/projects/acl/,0,https://security-tracker.debian.org/tracker/source-package/acl,,,,,,,,,,,,,,,153958,c,shared-lib,0,0,1,6,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Access control-related, so of concern."
  -libaudit0,audit,1:1.7.18-1.1,Dynamic library for security auditing,http://people.redhat.com/sgrubb/audit/,0,https://security-tracker.debian.org/tracker/source-package/audit,,,,,,,,,,,,,,,39292,c,shared-lib,0,0,1,6,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Audit framework for Debian, many other components depend on it.  Useful for detecting problems. Project infrastructure at Red Hat. SVN repo available. Most recent code change 2 months ago. Mailing lists and IRC exist. v2.4 release 10/2014, plans exist for v2.5 and 2.6. Couldn't find an issue tracker. ++"
  -libblkid1,util-linux,2.20.1-5.3,block device id library,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/Util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153961,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libept1.4.12,libept,1.0.9,High-level library for managing Debian package information,,0,https://security-tracker.debian.org/tracker/source-package/libept,,,,,,,,,,,,,,,111676,c++,devel-lib,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0","Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  -libgl1-mesa-dri,mesa,8.0.5-4+deb7u2,free implementation of the OpenGL API -- DRI modules,http://mesa3d.sourceforge.net/,4,https://security-tracker.debian.org/tracker/source-package/mesa,https://www.openhub.net/projects/mesa,Mesa,"Mesa is an open-source implementation of the OpenGL specification - a system for rendering interactive 3D graphics.
  -
  -A variety of device drivers allows Mesa to be used in many different environments ranging from software emulation to complete hardware acceleration for modern GPUs.
  -
  -Mesa ties into several other open-source projects: the Direct Rendering Infrastructure and X.org to provide OpenGL support to users of X on Linux, FreeBSD and other operating systems.",http://sourceforge.net/projects/mesa3d,,167,682,1037410,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",98352,,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libgpgme11,gpgme1.0,1.2.0-1.4+deb7u1,GPGME - GnuPG Made Easy,,1,https://security-tracker.debian.org/tracker/source-package/gpgme1.0,https://www.openhub.net/projects/gpgme,GPGME,"GnuPG Made Easy (GPGME) is a library designed to make access to GnuPG easier for applications. It provides a High-Level Crypto API for encryption, decryption, signing, signature verification and key management. Currently it uses GnuPG as its backend but the API isn't restricted to this engine; in fact we have already developed a backend for CMS (S/MIME).",http://www.gnupg.org/gpgme.html,http://www.gnupg.org/download/index.html#gpgme,4,16,71180,C,lgpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,133908,c,shared-lib,1,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","Vital for protecting email (see gpg) Git repo available. Issue tracker site uses self-signed cert; it's concerning that a user would have to compromise the HTTPS security model just to view and interact with the bug tracker. Openhub doesn't reflect their mailing lists in *multiple languages*. Appears to be actively maintained mostly by one dev, but notably just got donations supporting him for the next 2-3 years. ++"
  -libgssglue1,libgssglue,0.4-2,mechanism-switch gssapi library,http://www.citi.umich.edu/projects/nfsv4/linux/,1,https://security-tracker.debian.org/tracker/source-package/libgssglue,,,,,,,,,,,,,,,92711,,shared-lib,1,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",Vital for systems that use it; amount of use unclear.
  -liblocale-gettext-perl,liblocale-gettext-perl (1.05-7),1.05-7+b1,module using libc functions for internationalization in Perl,http://search.cpan.org/dist/gettext/gettext.pm,0,https://security-tracker.debian.org/tracker/source-package/liblocale-gettext-perl,https://www.openhub.net/projects/catatylstgettex,Catalyst::Plugin::I18N::Gettext,The Perl module Catalyst::Plugin::I18N::Gettext is a internationalization plugin using GNU gettext in the Catalyst framework without using module Locale::Maketext.,http://sourceforge.net/projects/catatylstgettex/,,0,1,290,Perl,,Stable Y-O-Y development activity,Short source control history,Average number of code comments,No recent development activity,153827,perl,devel-lib,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libmount1,util-linux,2.20.1-5.3,block device id library,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",127420,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libsqlite3-0,sqlite3,3.7.13-1+deb7u1,SQLite 3 shared library,http://www.sqlite.org/,5,https://security-tracker.debian.org/tracker/source-package/sqlite3,https://www.openhub.net/projects/sqlite,SQLite,"SQLite is a small C library that implements a self-contained, embeddable, zero-configuration SQL database engine. Implements most of SQL92 and ACID (atomic, consistent, isolated, and durable) transactions; no setup or administration needed.",http://sqlite.org/,http://sqlite.org/download.html,4,30,235125,C,Public_Domain,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,153138,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libtirpc1,libtirpc,0.2.2-5,transport-independent RPC library,,1,https://security-tracker.debian.org/tracker/source-package/libtirpc,https://www.openhub.net/projects/libtirpc,libtirpc,Libtirpc is a port of Suns Transport-Independent RPC library to Linux. It's being developed by the Bull GNU/Linux NFSv4 project. Note: The SVN Repository on this site is *not* used. Use the git://git.infradead.org/~steved/libtirpc.git GIT tree,http://sourceforge.net/projects/libtirpc,,9,31,18347,C,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",110350,,shared-lib,1,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","RPC library, used by NFS."
  -libuuid1,util-linux,2.20.1-5.3,Universally Unique ID library,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153956,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libx11-6,libx11,2:1.5.0-1+deb7u1,X11 client-side library,,4,https://security-tracker.debian.org/tracker/source-package/libx11,https://www.openhub.net/projects/libx11,libX11,git://anongit.freedesktop.org/xorg/lib/libX11,https://github.com/mirror/libX11,https://github.com/mirror/libX11/downloads,7,136,221808,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",151902,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libxfont1,libxfont,1:1.4.5-4,X11 font rasterisation library,,8,https://security-tracker.debian.org/tracker/source-package/libxfont,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
  -
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",98286,,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -linux-base,,3.5,Linux image base package,,0,https://security-tracker.debian.org/tracker/source-package/linux-base,,,,,,,,,,,,,,,145339,c,metapackage,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",These are small scripts and utilities for the Linux kernel.
  -linux-libc-dev,linux,3.2.63-2+deb7u2,Linux support headers for userspace development,,403,https://security-tracker.debian.org/tracker/source-package/linux,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
  -
  -!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",100872,,,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -login,shadow,1:4.1.5.1-1,system login tools,http://pkg-shadow.alioth.debian.org/,2,https://security-tracker.debian.org/tracker/source-package/shadow,https://www.openhub.net/projects/shadow-tool-suite,Shadow Tool Suite,"The shadow tool suite contains the following commands among others: login, passwd, useradd, groupadd.",http://pkg-shadow.alioth.debian.org/,http://pkg-shadow.alioth.debian.org/download.php,7,20,127125,C,bsd,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",153957,c,program,0,0,1,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Front door for local login. Has Home Page, part of shadow tool suite, Latest release May 2014, Public Repo, Somewhat active mailing list, NO issue tracker. ++"
  -mount,util-linux,2.20.1-5.3,Tools for mounting and manipulating filesystems,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153888,c,program,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python-chardet,chardet,2.0.1-2,universal character encoding detector,http://chardet.feedparser.org/,0,https://security-tracker.debian.org/tracker/source-package/chardet,https://www.openhub.net/projects/chardet,chardet,,,,0,1,176656,XSL Transformation,,,,,,126334,python,devel-lib,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python-debianbts,,1.11,Python interface to Debian's Bug Tracking System,,0,https://security-tracker.debian.org/tracker/source-package/python-debianbts,https://www.openhub.net/projects/python-debianbts,python-debianbts,,,,2,4,281,Python,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Small development team,113442,python,program,0,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python2.6,,2.6.8-1.1,Interactive high-level object-oriented language (version 2.6),,26,https://security-tracker.debian.org/tracker/source-package/python2.6,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",91215,c,devel-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python2.7,,2.7.3-6+deb7u2,Interactive high-level object-oriented language (version 2.7),,24,https://security-tracker.debian.org/tracker/source-package/python2.7,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",126065,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -telnet,netkit-telnet,0.17-36,The telnet client,,0,https://security-tracker.debian.org/tracker/source-package/netkit-telnet,,,,,,,,,,,,,,,139983,,program,1,0,0,6,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",Telnet is a fundamentally insecure protocol and is being phased out in most locations.
  -util-linux,,2.20.1-5.3,Miscellaneous system utilities,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153954,c,program,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -w3m,,0.5.3-8,WWW browsable pager with excellent tables/frames support,http://sourceforge.net/projects/w3m,1,https://security-tracker.debian.org/tracker/source-package/w3m,https://www.openhub.net/projects/w3m,w3m,"w3m is a pager/text-based WWW browser. It is similar to Lynx, but handles some things like page navigation differently. It can render tables and frames (by converting frames into tables) or display a document given from standard input. It can also be used with mouse in an xterm or in a gpm-driven console, and it is small.",http://w3m.sourceforge.net,http://sourceforge.net/project/showfiles.php?group_id=39518,17,28,166972,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Large, active development team",133696,c,program,1,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","Web browser, so can clearly process attacker data.  However, less commonly used in practice."
  +Read Submerged, a blog about Subversion at http://blogs.open.collab.net/svn",http://subversion.apache.org/,http://subversion.apache.org/packages.html,21,176,615914,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",34841,c++,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  +telnet,netkit-telnet,0.17-36,The telnet client,,0,https://security-tracker.debian.org/tracker/source-package/netkit-telnet,,,,,,,,,,,,,,,160511,,program,1,0,0,7,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 2 , Data only: 0",Telnet is a fundamentally insecure protocol and is being phased out in most locations.
  +util-linux,,2.20.1-5.3,Miscellaneous system utilities,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175845,c,program,0,0,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +w3m,,0.5.3-8,WWW browsable pager with excellent tables/frames support,http://sourceforge.net/projects/w3m,1,https://security-tracker.debian.org/tracker/source-package/w3m,https://www.openhub.net/projects/w3m,w3m,"w3m is a pager/text-based WWW browser. It is similar to Lynx, but handles some things like page navigation differently. It can render tables and frames (by converting frames into tables) or display a document given from standard input. It can also be used with mouse in an xterm or in a gpm-driven console, and it is small.",http://w3m.sourceforge.net,http://sourceforge.net/project/showfiles.php?group_id=39518,17,28,166972,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Large, active development team",153831,c,program,1,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: 0","Web browser, so can clearly process attacker data.  However, less commonly used in practice."
   x11-common,xorg,1:7.7+3~deb7u1,X Window System (X.Org) infrastructure,,2,https://security-tracker.debian.org/tracker/source-package/xorg,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",125405,shell,program,0,0,1,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",X development is transitioning towards Wayland.
  -libapr1,apr,1.4.6-3+deb7u1,Apache Portable Runtime Library,http://apr.apache.org/,3,https://security-tracker.debian.org/tracker/source-package/apr,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",109900,c,shared-lib,0,1,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Important. The general Apache Portable Runtime (APR) appears to be actively maintained.  However, it's not as clear that the LDAP library in it is as actively managed. HAS Home Page, HAS Mailing List, Issue tracker https://bz.apache.org/bugzilla/enter_bug.cgi?product=APR \++"
  -libaprutil1-ldap,apr-util,1.4.1-3,Apache Portable Runtime Utility Library - LDAP Driver,http://apr.apache.org/,1,https://security-tracker.debian.org/tracker/source-package/apr-util,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",95576,c,shared-lib,1,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","Important. The general Apache Portable Runtime (APR) appears to be actively maintained.  The LDAP driver is maintained as part of APR, http://apr.apache.org/ The APR-util version 1.5.4 was released September 22, 2014, so it is actively maintained. They use the apache.org repo and subversion; apr-util has been merged into main trunk, making it a little harder to see LDAP specifics to determine if the LDAP portion is active. Mailing list dev@apr.apache.org seems active. ++"
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",144381,shell,program,0,0,1,7,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0",X development is transitioning towards Wayland.
  +yum,,3.2.25-2,Advanced front-end for rpm,http://yum.baseurl.org/,1,https://security-tracker.debian.org/tracker/source-package/yum,https://www.openhub.net/projects/yum,yum,Yum is an automatic updater and package installer/remover for rpm systems. It automatically computes dependencies and figures out what things should occur to install packages. It makes it easier to maintain groups of machines without having to manually update each one using rpm.,http://yum.baseurl.org/,http://yum.baseurl.org/wiki/releases,3,98,148840,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,864,python,program,1,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 4, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","This is used by RPM-based systems to download/install programs.
  +It is anticipated that this will be replaced with DNF in
  +Fedora at least (https://lwn.net/Articles/580223/)."
  +apache2.2-bin,apache2,2.2.22-13+deb7u3,Apache HTTP Server common binary files,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",66918,,app-data,1,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: -3",
  +base-passwd,,3.5.26,Debian base system master password and group files,,0,https://security-tracker.debian.org/tracker/source-package/base-passwd,https://www.openhub.net/projects/passwd,passwd,Implementation of the password setting/changing utility through PAM and libuser libraries.,https://fedorahosted.org/passwd/,https://fedorahosted.org/releases/p/a/passwd/,1,104,1512,C,BSD-3-Clause GPL-1-0plus,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,175851,c,app-data,0,0,1,6,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 2, Exposure: 1 , Data only: -3",
  +e2fslibs,e2fsprogs,1.42.5-1.1,ext2/ext3/ext4 file system libraries,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175847,,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +e2fsprogs,,1.42.5-1.1,ext2/ext3/ext4 file system utilities,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175845,c,program,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +encfs,encfs (1.7.4-2.4),1.7.4-2.4+b1,encrypted virtual filesystem,http://www.arg0.net/encfs,4,https://security-tracker.debian.org/tracker/source-package/encfs,https://www.openhub.net/projects/6347,encfs,"EncFS provides an encrypted filesystem in user-space. It runs without any special permissions and uses the FUSE library and Linux kernel module to provide the filesystem interface. You can find links to source and binary releases below. EncFS is open source software, licensed under the GPL.
  +
  +As with most encrypted filesystems, Encfs is meant to provide security against off-line attacks; ie your notebook or backups fall into the wrong hands, etc. The way Encfs works is different from the  loopback  encrypted filesystem support built into the Linux kernel because it works on files at a time, not an entire block device. This is a big advantage in some ways, but does not come without a cost.",https://vgough.github.io/encfs/,,9,9,9265,C++,gpl3_or_later,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",2539,c++,program,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +glib-networking,,2.32.3-1,network-related giomodules for GLib,,0,https://security-tracker.debian.org/tracker/source-package/glib-networking,https://www.openhub.net/projects/glib-networking,glib-networking,,http://projects.gnome.org/,,15,136,12743,C,,Stable Y-O-Y development activity,Well-established codebase,Few source code comments,"Large, active development team",92566,c,plugin,1,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: 0","TLS API. Implements its own certificate verification. No support for certificate revocation. No active developers.,Implements GLib's TLS API, most notably used by libsoup (used by all GNOME applications, WebKitGTK+, etc.). It uses GnuTLS internally."
  +grep,,2.12-2,"GNU grep, egrep and fgrep",http://www.gnu.org/software/grep/,2,https://security-tracker.debian.org/tracker/source-package/grep,https://www.openhub.net/projects/grep,GNU grep,"Grep searches one or more input files for lines containing a match to a specified pattern. By default, grep prints the matching lines.",http://savannah.gnu.org/projects/grep/,,5,41,10816,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,175847,c,program,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +isc-dhcp-common,isc-dhcp,4.2.2.dfsg.1-5+deb70u6,common files used by all the isc-dhcp* packages,,22,https://security-tracker.debian.org/tracker/source-package/isc-dhcp,https://www.openhub.net/projects/4273,DHCP (ISC),"The Internet Systems Consortium (ISC) offers a Dynamic Host Configuration Protocol (DHCP) distribution including a DHCP server, client and relay agent. This distribution supports POSIX-compliant operating systems and also non-POSIX systems like Windows NT and MacOS.",http://www.isc.org/downloads/dhcp/,http://ftp.isc.org/isc/dhcp/,6,22,124066,C,isc,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,166139,,app-data,1,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: -3",
  +libaprutil1,apr-util,1.4.1-3,Apache Portable Runtime Utility Library,http://apr.apache.org/,1,https://security-tracker.debian.org/tracker/source-package/apr-util,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",124801,c,shared-lib,0,1,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Important. The general Apache Portable Runtime (APR) appears to be actively maintained.  However, it's not as clear that the LDAP library in it is as actively managed. HAS Home Page, HAS Mailing List, Issue tracker https://bz.apache.org/bugzilla/enter_bug.cgi?product=APR \++"
  +libaudit0,audit,1:1.7.18-1.1,Dynamic library for security auditing,http://people.redhat.com/sgrubb/audit/,0,https://security-tracker.debian.org/tracker/source-package/audit,,,,,,,,,,,,,,,44206,c,shared-lib,0,0,1,6,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Audit framework for Debian, many other components depend on it.  Useful for detecting problems. Project infrastructure at Red Hat. SVN repo available. Most recent code change 2 months ago. Mailing lists and IRC exist. v2.4 release 10/2014, plans exist for v2.5 and 2.6. Couldn't find an issue tracker. ++"
  +libboost-iostreams1.49.0,boost1.49,1.49.0-3.2,Boost.Iostreams Library,http://www.boost.org/libs/iostreams/,2,https://security-tracker.debian.org/tracker/source-package/boost1.49,,,,,,,,,,,,,,,92427,,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libcomerr2,e2fsprogs,1.42.5-1.1,common error description library,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175845,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libgd2-noxpm,libgd2,2.0.36~rc1~dfsg-6.1,GD Graphics Library version 2 (without XPM support),http://www.libgd.org/,3,https://security-tracker.debian.org/tracker/source-package/libgd2,https://www.openhub.net/projects/libgd,GD,"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG or GIF, among other formats. GD is commonly used to generate charts, graphics, thumbnails, and most anything else, on the fly. While not restricted to use on the web, the most common applications of GD involve web site development.",http://www.libgd.org,https://bitbucket.org/libgd/gd-libgd/downloads,6,28,52918,C,BSD-3-Clause,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,15551,,shared-lib,0,1,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  +liblzma5,xz-utils,5.1.1alpha+20120614-2,XZ-format compression library,http://tukaani.org/xz/,1,https://security-tracker.debian.org/tracker/source-package/xz-utils,https://www.openhub.net/projects/xz-utils,XZ Utils,"XZ Utils is free general-purpose data compression software with high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.",http://tukaani.org/xz/,,4,13,28089,C,gpl lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very well-commented source code,Average size development team,147964,c,shared-lib,0,1,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. Has Home page, public repo, Fairly active ML http://www.mail-archive.com/xz-devel@tukaani.org/, NO bug tracker ++"
  +libnfsidmap2,libnfsidmap,0.25-4,NFS idmapping library,http://www.citi.umich.edu/projects/nfsv4/linux/,0,https://security-tracker.debian.org/tracker/source-package/libnfsidmap,,,,,,,,,,,,,,,153617,,shared-lib,1,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 2 , Data only: 0","Important for NFS, amount of use unclear."
  +libpixman-1-0,pixman,0.26.0-4+deb7u1,pixel-manipulation library for X and cairo,,2,https://security-tracker.debian.org/tracker/source-package/pixman,https://www.openhub.net/projects/pixman,Pixman,"Pixman is a low-level software library for pixel manipulation, providing features such as image compositing and trapezoid rasterization. Important users of pixman are the cairo graphics library and the X server.",http://www.pixman.org/,http://cgit.freedesktop.org/pixman/,8,117,58390,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",145056,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libpng,,,,,20,https://security-tracker.debian.org/tracker/source-package/libpng,https://www.openhub.net/projects/libpng,libpng,"libpng is the official PNG reference library. It supports almost all PNG features, is extensible, and has been extensively tested for over 17 years.
  +
  +libpng is available as ANSI C source code and requires zlib 1.0.4 or later (1.2.3 or 1.1.4 recommended due to potential security vulnerabilities in earlier versions). In addition to the main library sources, libpng includes the rpng, rpng2 and wpng demo programs, the pngminus demo program, a subset of Willem van Schaik's PngSuite test images, and Willem's VisualPng demo program.  Configure, CMake, Visualc projects, and various makefiles are included for building libpng.
  +
  +Libpng is under the libpng license.",http://www.libpng.org/pub/png/libpng.html,http://sourceforge.net/project/showfiles.php?group_id=5624,5,10,407995,C,libpng,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,1,,,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
   libpng3,libpng,1.2.49-1,PNG library - runtime,http://libpng.org/pub/png/libpng.html,20,https://security-tracker.debian.org/tracker/source-package/libpng,https://www.openhub.net/projects/libpng,libpng,"libpng is the official PNG reference library. It supports almost all PNG features, is extensible, and has been extensively tested for over 17 years.
   
   libpng is available as ANSI C source code and requires zlib 1.0.4 or later (1.2.3 or 1.1.4 recommended due to potential security vulnerabilities in earlier versions). In addition to the main library sources, libpng includes the rpng, rpng2 and wpng demo programs, the pngminus demo program, a subset of Willem van Schaik's PngSuite test images, and Willem's VisualPng demo program.  Configure, CMake, Visualc projects, and various makefiles are included for building libpng.
   
  -Libpng is under the libpng license.",http://www.libpng.org/pub/png/libpng.html,http://sourceforge.net/project/showfiles.php?group_id=5624,5,10,407995,C,libpng,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,1156,,dummy,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  -libpng,,,,,20,https://security-tracker.debian.org/tracker/source-package/libpng,https://www.openhub.net/projects/libpng,libpng,"libpng is the official PNG reference library. It supports almost all PNG features, is extensible, and has been extensively tested for over 17 years.
  -
  -libpng is available as ANSI C source code and requires zlib 1.0.4 or later (1.2.3 or 1.1.4 recommended due to potential security vulnerabilities in earlier versions). In addition to the main library sources, libpng includes the rpng, rpng2 and wpng demo programs, the pngminus demo program, a subset of Willem van Schaik's PngSuite test images, and Willem's VisualPng demo program.  Configure, CMake, Visualc projects, and various makefiles are included for building libpng.
  -
  -Libpng is under the libpng license.",http://www.libpng.org/pub/png/libpng.html,http://sourceforge.net/project/showfiles.php?group_id=5624,5,10,407995,C,libpng,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,1,,,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  -rpm,,4.10.0-5+deb7u1,package manager for RPM,http://rpm.org/,11,https://security-tracker.debian.org/tracker/source-package/rpm,https://www.openhub.net/projects/rpm,RPM,"The RPM Package Manager (RPM) is a powerful command line driven package management system capable of installing, uninstalling, verifying, querying, and updating computer software packages. Each software package consists of an archive of files along with information about the package like its version, a description, and the like. There is also a library API, permitting advanced developers to manage such transactions from programming languages such as C or Python.",http://rpm.org,http://wiki.rpm.org/Download,16,102,67656,C,gpl lgpl21_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",21565,c,program,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0","This is used by RPM-based systems to install programs.  Here we refer to the version at rpm.org (used by Fedora, Red Hat Enterprise Linux, CentOS, SUSE).  (Note that there is a fork by the original RPM maintainer (Jeff Johnson) at rpm5.org, used by some organizations.)  Has ticket tracker, many long-opened defect tickets. Latest release 2014-10-09.
  -Repo publicly available in git, see: http://rpm.org/wiki/GetSource and a number of commits in 2015 (and before)."
  -dnsmasq,,2.62-3+deb7u1,Small caching DNS proxy and DHCP/TFTP server,,3,https://security-tracker.debian.org/tracker/source-package/dnsmasq,https://www.openhub.net/projects/dnsmasq,Dnsmasq,"Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network. It can serve the names of local machines which are not in the global DNS. The DHCP server integrates with the DNS server and allows machines with DHCP-allocated addresses to appear in the DNS with names configured either in each host or in a central configuration file. Dnsmasq supports static and dynamic DHCP leases and BOOTP/TFTP for network booting of diskless machines.",http://www.thekelleys.org.uk/dnsmasq/doc.html,http://www.thekelleys.org.uk/dnsmasq/doc.html,31,55,30256,C,gpl gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",4417,c,program,1,1,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0",
  -ffmpeg,libav,6:0.8.16-1,"Multimedia player, server, encoder and transcoder (transitional package)",http://libav.org/,188,https://security-tracker.debian.org/tracker/source-package/libav,https://www.openhub.net/projects/ffmpeg,FFmpeg,"FFmpeg is a complete solution to record, convert and stream audio and video. It includes libavcodec, the leading audio/video codec library. FFmpeg is mostly developed under Linux, but portable to operating systems, including Windows.",http://www.ffmpeg.org/,http://www.ffmpeg.org/download.html,305,1321,886911,C,lgpl21_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",20558,c,program,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  -qemu,,1.1.2+dfsg-6a+deb7u6,fast processor emulator,http://www.qemu.org/,66,https://security-tracker.debian.org/tracker/source-package/qemu,https://www.openhub.net/projects/qemu,QEMU,"QEMU is a generic and open source machine emulator and virtualizer.
  -
  -When used as a machine emulator, QEMU can run OSes and programs made for one machine on a different machine. By using dynamic translation, it achieves very good performance.
  -
  -When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU.",http://www.qemu.org/,http://wiki.qemu.org/Download,319,937,939991,C,bsd gpl lgpl Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",8308,,,0,0,1,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  -git,,1:1.7.10.4-1+wheezy1,"fast, scalable, distributed revision control system",http://git-scm.com/,3,https://security-tracker.debian.org/tracker/source-package/git,https://www.openhub.net/projects/git,Git,"Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.",http://git-scm.com/,http://git-scm.com/downloads,173,1345,366634,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",64773,shell,program,0,1,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  -base-passwd,,3.5.26,Debian base system master password and group files,,0,https://security-tracker.debian.org/tracker/source-package/base-passwd,https://www.openhub.net/projects/passwd,passwd,Implementation of the password setting/changing utility through PAM and libuser libraries.,https://fedorahosted.org/passwd/,https://fedorahosted.org/releases/p/a/passwd/,1,104,1512,C,BSD-3-Clause GPL-1-0plus,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,153958,c,app-data,0,0,1,5,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 1 , Data only: -3",
  -e2fslibs,e2fsprogs,1.42.5-1.1,ext2/ext3/ext4 file system libraries,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153955,,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -e2fsprogs,,1.42.5-1.1,ext2/ext3/ext4 file system utilities,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153954,c,program,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -grep,,2.12-2,"GNU grep, egrep and fgrep",http://www.gnu.org/software/grep/,2,https://security-tracker.debian.org/tracker/source-package/grep,https://www.openhub.net/projects/grep,GNU grep,"Grep searches one or more input files for lines containing a match to a specified pattern. By default, grep prints the matching lines.",http://savannah.gnu.org/projects/grep/,,5,41,10816,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,153956,c,program,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -isc-dhcp-common,isc-dhcp,4.2.2.dfsg.1-5+deb70u6,common files used by all the isc-dhcp* packages,,22,https://security-tracker.debian.org/tracker/source-package/isc-dhcp,https://www.openhub.net/projects/4273,DHCP (ISC),"The Internet Systems Consortium (ISC) offers a Dynamic Host Configuration Protocol (DHCP) distribution including a DHCP server, client and relay agent. This distribution supports POSIX-compliant operating systems and also non-POSIX systems like Windows NT and MacOS.",http://www.isc.org/downloads/dhcp/,http://ftp.isc.org/isc/dhcp/,6,22,124066,C,isc,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,144666,,app-data,1,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: -3",
  -libboost-iostreams1.49.0,boost1.49,1.49.0-3.2,Boost.Iostreams Library,http://www.boost.org/libs/iostreams/,2,https://security-tracker.debian.org/tracker/source-package/boost1.49,,,,,,,,,,,,,,,83500,,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libcomerr2,e2fsprogs,1.42.5-1.1,common error description library,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153955,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -liblzma5,xz-utils,5.1.1alpha+20120614-2,XZ-format compression library,http://tukaani.org/xz/,1,https://security-tracker.debian.org/tracker/source-package/xz-utils,https://www.openhub.net/projects/xz-utils,XZ Utils,"XZ Utils is free general-purpose data compression software with high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.",http://tukaani.org/xz/,,4,13,28089,C,gpl lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very well-commented source code,Average size development team,127699,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. Has Home page, public repo, Fairly active ML http://www.mail-archive.com/xz-devel@tukaani.org/, NO bug tracker ++"
  -libnfsidmap2,libnfsidmap,0.25-4,NFS idmapping library,http://www.citi.umich.edu/projects/nfsv4/linux/,0,https://security-tracker.debian.org/tracker/source-package/libnfsidmap,,,,,,,,,,,,,,,133540,,shared-lib,1,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0","Important for NFS, amount of use unclear."
  -libpixman-1-0,pixman,0.26.0-4+deb7u1,pixel-manipulation library for X and cairo,,2,https://security-tracker.debian.org/tracker/source-package/pixman,https://www.openhub.net/projects/pixman,Pixman,"Pixman is a low-level software library for pixel manipulation, providing features such as image compositing and trapezoid rasterization. Important users of pixman are the cairo graphics library and the X server.",http://www.pixman.org/,http://cgit.freedesktop.org/pixman/,8,117,58390,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",125282,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libsemanage1,libsemanage,2.1.6-6,SELinux policy management library,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsemanage,https://www.openhub.net/projects/libsemanage,libsemanage,An interface for SELinux management,https://github.com/pld-linux/libsemanage,,1,9,0,,,Stable Y-O-Y development activity,"Mature, well-established codebase",,Only a single active developer,129674,,shared-lib,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libss2,e2fsprogs,1.42.5-1.1,command-line interface parsing library,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153949,,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +Libpng is under the libpng license.",http://www.libpng.org/pub/png/libpng.html,http://sourceforge.net/project/showfiles.php?group_id=5624,5,10,407995,C,libpng,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,1274,,dummy,0,1,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  +libsemanage1,libsemanage,2.1.6-6,SELinux policy management library,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsemanage,https://www.openhub.net/projects/libsemanage,libsemanage,An interface for SELinux management,https://github.com/pld-linux/libsemanage,,1,9,0,,,Stable Y-O-Y development activity,"Mature, well-established codebase",,Only a single active developer,149982,,shared-lib,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libss2,e2fsprogs,1.42.5-1.1,command-line interface parsing library,http://e2fsprogs.sourceforge.net,2,https://security-tracker.debian.org/tracker/source-package/e2fsprogs,https://www.openhub.net/projects/e2fsprogs,e2fsprogs,The e2fsprogs package contains the utilities for handling the ext2 file system. It also supports the ext3 and ext4 journaling file systems.,http://ext4.wiki.kernel.org/,http://e2fsprogs.sourceforge.net/,30,139,159294,C,BSD-3-Clause GNU_General_Public_License_v2_0_only lgpl-2_0 mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175841,,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxt6,libxt,1:1.1.3-1+deb7u1,X11 toolkit intrinsics library,,2,https://security-tracker.debian.org/tracker/source-package/libxt,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",116029,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",134292,c,shared-lib,0,0,0,6,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   linux-headers-3.2.0-4-common,linux,3.2.63-2+deb7u2,Common header files for Linux 3.2.0-4,,403,https://security-tracker.debian.org/tracker/source-package/linux,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
   
  -!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",24343,,,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  -lsof,,4.86+dfsg-1,Utility to list open files,http://people.freebsd.org/~abe/,0,https://security-tracker.debian.org/tracker/source-package/lsof,https://www.openhub.net/projects/lsof,lsof,"The free, open-source, Unix administrative tool lsof (for LiSt Open Files) displays information about files open to Unix processes.",http://people.freebsd.org/~abe/,http://people.freebsd.org/~abe/,,,,,Distributable,,,,,144416,c,program,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",Unlikely to be a security vulnerability
  +!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",27146,,,0,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +lsof,,4.86+dfsg-1,Utility to list open files,http://people.freebsd.org/~abe/,0,https://security-tracker.debian.org/tracker/source-package/lsof,https://www.openhub.net/projects/lsof,lsof,"The free, open-source, Unix administrative tool lsof (for LiSt Open Files) displays information about files open to Unix processes.",http://people.freebsd.org/~abe/,http://people.freebsd.org/~abe/,,,,,Distributable,,,,,165141,c,program,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",Unlikely to be a security vulnerability
   net-tools,,1.60-24.2,The NET-3 networking toolkit,http://net-tools.berlios.de/,0,https://security-tracker.debian.org/tracker/source-package/net-tools,https://www.openhub.net/projects/net-tools,net-tools,"A collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Includes: arp, hostname, ifconfig, netstat, rarp, route, plipconfig, slattach, mii-tool, iptunn
   
  -Please keep in mind that most net-tools programs are obsolete now. See ethtool and iproute2 instead.",https://sourceforge.net/projects/net-tools/,http://downloads.sourceforge.net/net-tools/,5,25,14709,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,153788,c,program,1,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","It's unclear if the Debian package and SourceForge project are still related.  This warrants further examination. Upstream listed as https://developer.berlios.de/projects/net-tools/ but has moved to http://sourceforge.net/projects/net-tools/ Has mailing though rather inactive. Has public git repo, latest commit 2015-01-07 on 2015-03-12. These are tools for controlling the network and typically run as root; it's unclear how exposed they are to network attack (most, if not all, are probably not exposed). This lack of exposure probably lowers their priority. ++"
  -sysv-rc,sysvinit,2.88dsf-41+deb7u1,System-V-like runlevel change mechanism,http://savannah.nongnu.org/projects/sysvinit,0,https://security-tracker.debian.org/tracker/source-package/sysvinit,https://www.openhub.net/projects/sysvinit,sysvinit,"The Sysvinit package contains programs for controlling the startup, running, and shutdown of the system.",http://savannah.nongnu.org/projects/sysvinit,,0,2,8054,C,gpl,Decreasing Y-O-Y development activity,Well-established codebase,Average number of code comments,No recent development activity,153807,perl,app-data,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  -ucf,,3.0025+nmu3,Update Configuration File: preserve user changes to config files.,,0,https://security-tracker.debian.org/tracker/source-package/ucf,https://www.openhub.net/projects/cfg-update,cfg-update,Gentoo cfg-update config file update utility,https://github.com/rich0/cfg-update,,2,4,2495,Perl,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Young, but established codebase",Very few source code comments,Small development team,153686,shell,program,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -vim-common,vim,2:7.3.547-7,Vi IMproved - Common files,http://www.vim.org/,1,https://security-tracker.debian.org/tracker/source-package/vim,https://www.openhub.net/projects/vim,Vim,"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. It's useful whether you're already using vi or using a different editor.",http://www.vim.org/,http://www.vim.org/download.php,1,12,844733,C,Vim_License,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,152976,,app-data,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  -xz-utils,,5.1.1alpha+20120614-2,XZ-format compression utilities,http://tukaani.org/xz/,1,https://security-tracker.debian.org/tracker/source-package/xz-utils,https://www.openhub.net/projects/xz-utils,XZ Utils,"XZ Utils is free general-purpose data compression software with high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.",http://tukaani.org/xz/,,4,13,28089,C,gpl lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very well-commented source code,Average size development team,146370,c,program,0,1,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. HAS Home Page, public code repo http://git.tukaani.org/?p=xz.git;a=summary - fairly active by small # of committers.  Some mailing list activity.  No bug tracker found. ++"
  -apache2.2-bin,apache2,2.2.22-13+deb7u3,Apache HTTP Server common binary files,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",61107,,app-data,1,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: -3",
  -apache2.2-common,apache2,2.2.22-13+deb7u3,Apache HTTP Server common files,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",48178,c,app-data,1,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: -3",
  -libaprutil1,apr-util,1.4.1-3,Apache Portable Runtime Utility Library,http://apr.apache.org/,1,https://security-tracker.debian.org/tracker/source-package/apr-util,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",109496,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Important. The general Apache Portable Runtime (APR) appears to be actively maintained.  However, it's not as clear that the LDAP library in it is as actively managed. HAS Home Page, HAS Mailing List, Issue tracker https://bz.apache.org/bugzilla/enter_bug.cgi?product=APR \++"
  -libgd2-noxpm,libgd2,2.0.36~rc1~dfsg-6.1,GD Graphics Library version 2 (without XPM support),http://www.libgd.org/,3,https://security-tracker.debian.org/tracker/source-package/libgd2,https://www.openhub.net/projects/libgd,GD,"GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG or GIF, among other formats. GD is commonly used to generate charts, graphics, thumbnails, and most anything else, on the fly. While not restricted to use on the web, the most common applications of GD involve web site development.",http://www.libgd.org,https://bitbucket.org/libgd/gd-libgd/downloads,6,28,52918,C,BSD-3-Clause,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,14451,,shared-lib,0,1,0,5,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0",
  -coolkey,,1.1.0-12,Smart Card PKCS #11 cryptographic module,http://directory.fedoraproject.org/wiki/CoolKey,0,https://security-tracker.debian.org/tracker/source-package/coolkey,,,,,,,,,,,,,,,124,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0","Smart card drivers.  Not used in many environments, but critically important for security in other environments.  Activity unclear. Managed via Fedora packaging active here: https://apps.fedoraproject.org/packages/coolkey but that is not where the real code is maintained. Important for users of PKCS#11, but slightly specialized. http://pkgs.fedoraproject.org/gitweb/?p=coolkey.git http://pkg-coolkey.alioth.debian.org/ ++"
  -libopencryptoki0,opencryptoki,2.3.1+dfsg-3,PKCS#11 implementation (library),http://opencryptoki.sourceforge.net/,2,https://security-tracker.debian.org/tracker/source-package/opencryptoki,,,,,,,,,,,,,,,223,,shared-lib,0,1,0,5,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
  -binutils-dev,binutils,2.22-8,GNU binary utilities (BFD development files),,9,https://security-tracker.debian.org/tracker/source-package/binutils,https://www.openhub.net/projects/binutils,GNU binutils,"The GNU linker and related programs and libraries: ar, as, gprof, ld, nm, ranlib, strip, libbfd.  You depend on this utterly.",http://www.gnu.org/software/binutils/,http://ftp.gnu.org/gnu/binutils/,173,569,4635179,C,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",1707,,devel-lib,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  -libzrtpcpp2,libzrtpcpp,2.0.0-3,ccrtp extension for zrtp/Zfone support,http://www.gnu.org/software/ccrtp/,3,https://security-tracker.debian.org/tracker/source-package/libzrtpcpp,,,,,,,,,,,,,,,748,,shared-lib,0,1,0,5,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
  -sendmail,,8.14.4-4,"powerful, efficient, and scalable Mail Transport Agent",http://www.sendmail.org,1,https://security-tracker.debian.org/tracker/source-package/sendmail,https://www.openhub.net/projects/4536,Sendmail,"Sendmail is a remarkably flexible program, supporting many kinds of mail transfer and delivery including the overwhelmingly popular SMTP.",http://www.sendmail.org/,http://www.sendmail.com/sm/open_source/download/,,,,,sendmail,,,,,1755,,metapackage,1,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","This is a widely-used mail transfer agent (MTA). Sendmail main site https://www.sendmail.com/sm/open_source/
  -No public repo found.  However, they have tarball    snapshots   ; on 2015-03-13 the current snapshot was 2015-03-06. This indicates active development, but its development seems opaque so difficult to say more. Version 8.15.1 posted 2014-12-06."
  -glib-networking,,2.32.3-1,network-related giomodules for GLib,,0,https://security-tracker.debian.org/tracker/source-package/glib-networking,https://www.openhub.net/projects/glib-networking,glib-networking,,http://projects.gnome.org/,,15,136,12743,C,,Stable Y-O-Y development activity,Well-established codebase,Few source code comments,"Large, active development team",77071,c,plugin,1,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: 0","TLS API. Implements its own certificate verification. No support for certificate revocation. No active developers.,Implements GLib's TLS API, most notably used by libsoup (used by all GNOME applications, WebKitGTK+, etc.). It uses GnuTLS internally."
  -encfs,encfs (1.7.4-2.4),1.7.4-2.4+b1,encrypted virtual filesystem,http://www.arg0.net/encfs,4,https://security-tracker.debian.org/tracker/source-package/encfs,https://www.openhub.net/projects/6347,encfs,"EncFS provides an encrypted filesystem in user-space. It runs without any special permissions and uses the FUSE library and Linux kernel module to provide the filesystem interface. You can find links to source and binary releases below. EncFS is open source software, licensed under the GPL.
  -
  -As with most encrypted filesystems, Encfs is meant to provide security against off-line attacks; ie your notebook or backups fall into the wrong hands, etc. The way Encfs works is different from the  loopback  encrypted filesystem support built into the Linux kernel because it works on files at a time, not an entire block device. This is a big advantage in some ways, but does not come without a cost.",https://vgough.github.io/encfs/,,9,9,9265,C++,gpl3_or_later,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",2279,c++,program,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  +Please keep in mind that most net-tools programs are obsolete now. See ethtool and iproute2 instead.",https://sourceforge.net/projects/net-tools/,http://downloads.sourceforge.net/net-tools/,5,25,14709,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,175651,c,program,1,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 2 , Data only: 0","It's unclear if the Debian package and SourceForge project are still related.  This warrants further examination. Upstream listed as https://developer.berlios.de/projects/net-tools/ but has moved to http://sourceforge.net/projects/net-tools/ Has mailing though rather inactive. Has public git repo, latest commit 2015-01-07 on 2015-03-12. These are tools for controlling the network and typically run as root; it's unclear how exposed they are to network attack (most, if not all, are probably not exposed). This lack of exposure probably lowers their priority. ++"
   owncloud,,,,,101,https://security-tracker.debian.org/tracker/source-package/owncloud,https://www.openhub.net/projects/owncloud,ownCloud,"ownCloud is an open-source web application for data synchronization, file sharing, and cloud storage.
   
  -ownCloud provides access to your data through a web interface or WebDAV while providing a platform to view, sync and share across devices easily   all under your control. ownCloud's open architecture is extensible via a simple but powerful API for applications and plugins and works with any storage.",http://ownCloud.org,http://owncloud.org/install/,345,778,2280056,JavaScript,AGPL3,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",2242,,,1,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0",
  -cpp-4.6,gcc-4.6,4.6.3-14,GNU C preprocessor,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",32573,c,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -cpp-4.7,gcc-4.7,4.7.2-5,GNU C preprocessor,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",58739,,,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -dc,bc (1.06.95-2),1.06.95-2+b1,The GNU dc arbitrary precision reverse-polish calculator,,0,https://security-tracker.debian.org/tracker/source-package/bc,,,,,,,,,,,,,,,133950,,program,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",Use relatively rare.  Unlikely to process data from attacker.
  -discover,,2.1.2-5.2,hardware identification system,,0,https://security-tracker.debian.org/tracker/source-package/discover,,,,,,,,,,,,,,,135720,,program,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0","Conceivably a local exploit opportunity, but not likely."
  -doc-debian,,6.1,Debian Project documentation and other documents,,0,https://security-tracker.debian.org/tracker/source-package/doc-debian,https://www.openhub.net/projects/doc-debian,doc-debian,,,,0,15,585,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,No recent development activity,131296,,documentation,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -gcc-4.6,,4.6.3-14,GNU C compiler,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",32201,c++,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -gcc-4.7,,4.7.2-5,GNU C compiler,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",48375,,,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -gcc-4.7-base,gcc-4.7,4.7.2-5,"GCC, the GNU Compiler Collection (base package)",http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",81863,,,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -grub-pc,grub2,1.99-27+deb7u2,"GRand Unified Bootloader, version 2 (PC/BIOS version)",http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",136014,c,TODO,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -grub-pc-bin,grub2,1.99-27+deb7u2,"GRand Unified Bootloader, version 2 (PC/BIOS binaries)",http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",117153,,,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -grub2-common,grub2,1.99-27+deb7u2,GRand Unified Bootloader (common files for version 2),http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",124074,c,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -iptables,,1.4.14-3.1,administration tools for packet filtering and NAT,http://www.netfilter.org/,1,https://security-tracker.debian.org/tracker/source-package/iptables,https://www.openhub.net/projects/iptables,iptables,iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.,http://www.netfilter.org/projects/iptables/index.html,http://www.netfilter.org/projects/iptables/downloads.html,17,231,47935,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",153349,c,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -kbd,,1.15.3-9,Linux console font and keytable utilities,,1,https://security-tracker.debian.org/tracker/source-package/kbd,https://www.openhub.net/projects/kbd,kbd,"This package contains tools for managing the Linux console (Linux console, virtual terminals on it, keyboard, etc.). Mainly, what they do is loading console fonts and keyboard maps. Also this package contains a set of various fonts and keyboard maps.",http://www.kbd-project.org,http://www.kbd-project.org/download/,8,33,56653,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",135274,c,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -laptop-detect,,0.13.7,attempt to detect a laptop,,0,https://security-tracker.debian.org/tracker/source-package/laptop-detect,,,,,,,,,,,,,,,147131,shell,program,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",Unlikely to be a security vulnerability
  +ownCloud provides access to your data through a web interface or WebDAV while providing a platform to view, sync and share across devices easily   all under your control. ownCloud's open architecture is extensible via a simple but powerful API for applications and plugins and works with any storage.",http://ownCloud.org,http://owncloud.org/install/,345,778,2280056,JavaScript,AGPL3,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",2479,,,1,0,0,6,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",
  +sysv-rc,sysvinit,2.88dsf-41+deb7u1,System-V-like runlevel change mechanism,http://savannah.nongnu.org/projects/sysvinit,0,https://security-tracker.debian.org/tracker/source-package/sysvinit,https://www.openhub.net/projects/sysvinit,sysvinit,"The Sysvinit package contains programs for controlling the startup, running, and shutdown of the system.",http://savannah.nongnu.org/projects/sysvinit,,0,2,8054,C,gpl,Decreasing Y-O-Y development activity,Well-established codebase,Average number of code comments,No recent development activity,175680,perl,app-data,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
  +ucf,,3.0025+nmu3,Update Configuration File: preserve user changes to config files.,,0,https://security-tracker.debian.org/tracker/source-package/ucf,https://www.openhub.net/projects/cfg-update,cfg-update,Gentoo cfg-update config file update utility,https://github.com/rich0/cfg-update,,2,4,2495,Perl,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Young, but established codebase",Very few source code comments,Small development team,175556,shell,program,0,0,0,6,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +vim-common,vim,2:7.3.547-7,Vi IMproved - Common files,http://www.vim.org/,1,https://security-tracker.debian.org/tracker/source-package/vim,https://www.openhub.net/projects/vim,Vim,"Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. It's useful whether you're already using vi or using a different editor.",http://www.vim.org/,http://www.vim.org/download.php,1,12,844733,C,Vim_License,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,174768,,app-data,0,0,0,6,"Website points: 0, CVE: 1, 12-month contributor: 4, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
  +xz-utils,,5.1.1alpha+20120614-2,XZ-format compression utilities,http://tukaani.org/xz/,1,https://security-tracker.debian.org/tracker/source-package/xz-utils,https://www.openhub.net/projects/xz-utils,XZ Utils,"XZ Utils is free general-purpose data compression software with high compression ratio. XZ Utils were written for POSIX-like systems, but also work on some not-so-POSIX systems. XZ Utils are the successor to LZMA Utils.",http://tukaani.org/xz/,,4,13,28089,C,gpl lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very well-commented source code,Average size development team,167639,c,program,0,1,0,6,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. HAS Home Page, public code repo http://git.tukaani.org/?p=xz.git;a=summary - fairly active by small # of committers.  Some mailing list activity.  No bug tracker found. ++"
  +analog,,2:6.0-19.1,web server log analyzer,http://www.analog.cx/,0,https://security-tracker.debian.org/tracker/source-package/analog,https://www.openhub.net/projects/analogcamie,Analog C:Amie Edition,"Analog was created by Stephen Turner in 1995 as a multi-purpose, multi-platform log file analyser. He maintained the project until 2004, at which point he ceased to update the project. In 2007, as a long-term user of Analog and in light of the release of Windows Vista that could not be identified by Analog, C:Amie has undertaken to maintain Analog and to keep its detection current.",http://camie.dyndns.org/analog/,http://camie.dyndns.org/analog/download/,,,,,,,,,,23605,,program,1,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0","Web log analyzer, analyzes attacker-provided data.  Could conceivably be way to attack via maliciously-formatted data for logging."
  +apache2.2-common,apache2,2.2.22-13+deb7u3,Apache HTTP Server common files,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",51613,c,app-data,1,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 2 , Data only: -3",
  +binutils-dev,binutils,2.22-8,GNU binary utilities (BFD development files),,9,https://security-tracker.debian.org/tracker/source-package/binutils,https://www.openhub.net/projects/binutils,GNU binutils,"The GNU linker and related programs and libraries: ar, as, gprof, ld, nm, ranlib, strip, libbfd.  You depend on this utterly.",http://www.gnu.org/software/binutils/,http://ftp.gnu.org/gnu/binutils/,173,569,4635179,C,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Very large, active development team",1808,,devel-lib,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  +coolkey,,1.1.0-12,Smart Card PKCS #11 cryptographic module,http://directory.fedoraproject.org/wiki/CoolKey,0,https://security-tracker.debian.org/tracker/source-package/coolkey,,,,,,,,,,,,,,,135,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0","Smart card drivers.  Not used in many environments, but critically important for security in other environments.  Activity unclear. Managed via Fedora packaging active here: https://apps.fedoraproject.org/packages/coolkey but that is not where the real code is maintained. Important for users of PKCS#11, but slightly specialized. http://pkgs.fedoraproject.org/gitweb/?p=coolkey.git http://pkg-coolkey.alioth.debian.org/ ++"
  +cpp-4.7,gcc-4.7,4.7.2-5,GNU C preprocessor,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",64865,,,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +dc,bc (1.06.95-2),1.06.95-2+b1,The GNU dc arbitrary precision reverse-polish calculator,,0,https://security-tracker.debian.org/tracker/source-package/bc,,,,,,,,,,,,,,,154174,,program,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",Use relatively rare.  Unlikely to process data from attacker.
  +discover,,2.1.2-5.2,hardware identification system,,0,https://security-tracker.debian.org/tracker/source-package/discover,,,,,,,,,,,,,,,156633,,program,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0","Conceivably a local exploit opportunity, but not likely."
  +doc-debian,,6.1,Debian Project documentation and other documents,,0,https://security-tracker.debian.org/tracker/source-package/doc-debian,https://www.openhub.net/projects/doc-debian,doc-debian,,,,0,15,585,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,No recent development activity,151317,,documentation,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 5, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +fail2ban,,0.8.6-3wheezy3,ban hosts that cause multiple authentication errors,http://www.fail2ban.org,4,https://security-tracker.debian.org/tracker/source-package/fail2ban,https://www.openhub.net/projects/fail2ban,fail2ban,Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates firewall rules to reject the IP address.,http://www.fail2ban.org/wiki/index.php/Main_Page,http://www.fail2ban.org/wiki/index.php/Downloads,38,103,11081,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",16687,python,program,0,1,1,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 1 , Data only: 0","Used on 10% of Debian installations according to popcon thus millions of users,Monitors and parses log files and  executes commands to manipulate firewalls based on parsed logfiles (thus possibility of injection) usually runs as root"
  +gcc-4.7-base,gcc-4.7,4.7.2-5,"GCC, the GNU Compiler Collection (base package)",http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",89984,,,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +grub-pc,grub2,1.99-27+deb7u2,"GRand Unified Bootloader, version 2 (PC/BIOS version)",http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",155772,c,TODO,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +grub-pc-bin,grub2,1.99-27+deb7u2,"GRand Unified Bootloader, version 2 (PC/BIOS binaries)",http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",135651,,,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +grub2-common,grub2,1.99-27+deb7u2,GRand Unified Bootloader (common files for version 2),http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",143987,c,program,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +iptables,,1.4.14-3.1,administration tools for packet filtering and NAT,http://www.netfilter.org/,1,https://security-tracker.debian.org/tracker/source-package/iptables,https://www.openhub.net/projects/iptables,iptables,iptables is the userspace command line program used to configure the Linux 2.4.x and 2.6.x IPv4 packet filtering ruleset. It is targeted towards system administrators.,http://www.netfilter.org/projects/iptables/index.html,http://www.netfilter.org/projects/iptables/downloads.html,17,231,47935,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",175166,c,program,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +kbd,,1.15.3-9,Linux console font and keytable utilities,,1,https://security-tracker.debian.org/tracker/source-package/kbd,https://www.openhub.net/projects/kbd,kbd,"This package contains tools for managing the Linux console (Linux console, virtual terminals on it, keyboard, etc.). Mainly, what they do is loading console fonts and keyboard maps. Also this package contains a set of various fonts and keyboard maps.",http://www.kbd-project.org,http://www.kbd-project.org/download/,8,33,56653,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",156192,c,program,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +laptop-detect,,0.13.7,attempt to detect a laptop,,0,https://security-tracker.debian.org/tracker/source-package/laptop-detect,,,,,,,,,,,,,,,168659,shell,program,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",Unlikely to be a security vulnerability
  +libaprutil1-dbd-sqlite3,apr-util,1.4.1-3,Apache Portable Runtime Utility Library - SQLite3 Driver,http://apr.apache.org/,1,https://security-tracker.debian.org/tracker/source-package/apr-util,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",109122,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libffi5,libffi,3.0.10-3,Foreign Function Interface library runtime,,0,https://security-tracker.debian.org/tracker/source-package/libffi,https://www.openhub.net/projects/11338,libffi,"Compilers for high level languages generate code that follows certain conventions. These conventions are necessary, in part, for separate compilation to work. One such convention is the ""calling convention"". The ""calling convention"" is a set of assumptions made by the compiler about where function arguments will be found on entry to a function. A ""calling convention"" also specifies where the return value for a function is found.
   
  -The libffi library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run-time.",http://sourceware.org/libffi,http://sourceware.org/libffi,23,63,45983,C,BSD-3-Clause,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",80666,c,shared-lib,0,1,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Development tool library. Somewhat less likely to contain vulnerabilities directly.
  -libfontenc1,libfontenc,1:1.1.1-1,X11 font encoding library,,0,https://security-tracker.debian.org/tracker/source-package/libfontenc,,,,,,,,,,,,,,,105286,,shared-lib,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",Less likely to be a security vulnerability.
  -libgc1c2,libgc,1:7.1-9.1,conservative garbage collector for C and C++,http://www.hpl.hp.com/personal/Hans_Boehm/gc/,1,https://security-tracker.debian.org/tracker/source-package/libgc,,,,,,,,,,,,,,,136602,,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libgcc1,gcc-4.7 (4.7.2-5),1:4.7.2-5,GCC support library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153934,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libgomp1,gcc-4.7,4.7.2-5,GCC OpenMP (GOMP) support library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",128892,,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libgpg-error0,libgpg-error,1.10-3.1,library for common error values and messages in GnuPG components,http://www.gnupg.org/related_software/libgpg-error/,0,https://security-tracker.debian.org/tracker/source-package/libgpg-error,https://www.openhub.net/projects/libgpg-error,libgpg-error,"This is a library that defines common error values for all GnuPG components.  Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SmartCard Daemon and more.",,,14,23,44379,shell script,lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153854,c,shared-lib,0,1,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",See GNUPG.
  -libitm1,gcc-4.7,4.7.2-5,GNU Transactional Memory Library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",82842,,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The libffi library provides a portable, high level programming interface to various calling conventions. This allows a programmer to call any function specified by a call interface description at run-time.",http://sourceware.org/libffi,http://sourceware.org/libffi,23,63,45983,C,BSD-3-Clause,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",88952,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0",Development tool library. Somewhat less likely to contain vulnerabilities directly.
  +libfontenc1,libfontenc,1:1.1.1-1,X11 font encoding library,,0,https://security-tracker.debian.org/tracker/source-package/libfontenc,,,,,,,,,,,,,,,122750,,shared-lib,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",Less likely to be a security vulnerability.
  +libgc1c2,libgc,1:7.1-9.1,conservative garbage collector for C and C++,http://www.hpl.hp.com/personal/Hans_Boehm/gc/,1,https://security-tracker.debian.org/tracker/source-package/libgc,,,,,,,,,,,,,,,157052,,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libgcc1,gcc-4.7 (4.7.2-5),1:4.7.2-5,GCC support library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175820,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libgif4,giflib,4.1.6-10,library for GIF images (library),http://giflib.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/giflib,https://www.openhub.net/projects/giflib,giflib -- A library for processing GIFs,"A library for rendering and generating GIF image files. This is the GIF service code in C used for over two decades by graphics applications, web browsers, game consoles, ATMs, and pretty much anything else that throws pixels on a display. Simple, stable, bulletproof, and no longer parent-encumbered.",http://sourceforge.net/projects/giflib,,4,13,11892,C,BSD-3-Clause,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,107296,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Widely-used format that is decompressed and provided by attackers. HAS Home Page, Active issue tracker, Mailing list, public repo. ++"
  +libgomp1,gcc-4.7,4.7.2-5,GCC OpenMP (GOMP) support library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",148263,,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libgpg-error0,libgpg-error,1.10-3.1,library for common error values and messages in GnuPG components,http://www.gnupg.org/related_software/libgpg-error/,0,https://security-tracker.debian.org/tracker/source-package/libgpg-error,https://www.openhub.net/projects/libgpg-error,libgpg-error,"This is a library that defines common error values for all GnuPG components.  Among these are GPG, GPGSM, GPGME, GPG-Agent, libgcrypt, Libksba, DirMngr, Pinentry, SmartCard Daemon and more.",,,14,23,44379,shell script,lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",175743,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0",See GNUPG.
  +libitm1,gcc-4.7,4.7.2-5,GNU Transactional Memory Library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",94329,,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libopencryptoki0,opencryptoki,2.3.1+dfsg-3,PKCS#11 implementation (library),http://opencryptoki.sourceforge.net/,2,https://security-tracker.debian.org/tracker/source-package/opencryptoki,,,,,,,,,,,,,,,243,,shared-lib,0,1,0,5,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
   libp11-kit0,p11-kit,0.12-3,Library for loading and coordinating access to PKCS#11 modules - runtime,http://p11-glue.freedesktop.org/p11-kit.html,0,https://security-tracker.debian.org/tracker/source-package/p11-kit,https://www.openhub.net/projects/p11-kit,p11-kit,"Provides a way to load and enumerate PKCS#11 modules. Provides a standard configuration setup for installing PKCS#11 modules in such a way that they're discoverable.
   
  -Also solves problems with coordinating the use of PKCS#11 by different components or libraries living in the same process.",http://p11-glue.freedesktop.org/p11-kit.html,http://p11-glue.freedesktop.org/releases/,9,26,57382,C,bsd,Decreasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",127724,c,shared-lib,0,1,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Manages security keys. Has Home page, Bug Tracker https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue, ML http://lists.freedesktop.org/archives/p11-glue/ fairly active ++"
  -libpam-runtime,pam,1.1.3-7.1,Runtime support for the PAM library,http://pam.sourceforge.net/,15,https://security-tracker.debian.org/tracker/source-package/pam,https://www.openhub.net/projects/linux-pam,Linux-PAM,Linux-PAM (Pluggable Authentication Modules for Linux) project.,http://www.linux-pam.org,https://fedorahosted.org/releases/l/i/linux-pam/,7,20,57169,C,BSD-3-Clause gpl gpl3,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153955,,app-data,0,1,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: -3",
  -libquadmath0,gcc-4.7,4.7.2-5,GCC Quad-Precision Math Library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",107929,,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +Also solves problems with coordinating the use of PKCS#11 by different components or libraries living in the same process.",http://p11-glue.freedesktop.org/p11-kit.html,http://p11-glue.freedesktop.org/releases/,9,26,57382,C,bsd,Decreasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",147986,c,shared-lib,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0","Manages security keys. Has Home page, Bug Tracker https://bugs.freedesktop.org/enter_bug.cgi?product=p11-glue, ML http://lists.freedesktop.org/archives/p11-glue/ fairly active ++"
  +libpam-runtime,pam,1.1.3-7.1,Runtime support for the PAM library,http://pam.sourceforge.net/,15,https://security-tracker.debian.org/tracker/source-package/pam,https://www.openhub.net/projects/linux-pam,Linux-PAM,Linux-PAM (Pluggable Authentication Modules for Linux) project.,http://www.linux-pam.org,https://fedorahosted.org/releases/l/i/linux-pam/,7,20,57169,C,BSD-3-Clause gpl gpl3,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",175848,,app-data,0,1,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: -3",
  +libquadmath0,gcc-4.7,4.7.2-5,GCC Quad-Precision Math Library,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",125844,,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libselinux1,libselinux,2.1.9-5,SELinux runtime shared libraries,,0,https://security-tracker.debian.org/tracker/source-package/libselinux,https://www.openhub.net/projects/selinux,Security-enhanced Linux,"This is a public forum for the NSA Security-Enhanced Linux project. This is not intended to replace NSA's work or official website but rather to allow broader participation in extending and adapting SELinux for distributions.
   
   SELinux normally comes with your Linux distribution. It is unusual for an ordinary user to install it manually.
   
  -The proposed logo is not the official SELinux logo.",http://userspace.selinuxproject.org/,,27,77,167185,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",153852,c,shared-lib,0,0,1,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",SELinux vital for security on systems using it (there are many).  Many of the critical parts are in the kernel.
  -libsm6,libsm,2:1.2.1-2,X11 Session Management library,,0,https://security-tracker.debian.org/tracker/source-package/libsm,,,,,,,,,,,,,,,120748,,shared-lib,0,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",Just stores X11 sessions for later use.
  -libstdc++6,gcc-4.7,4.7.2-5,GNU Standard C++ Library v3,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153910,c++,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The proposed logo is not the official SELinux logo.",http://userspace.selinuxproject.org/,,27,77,167185,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",175723,c,shared-lib,0,0,1,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0",SELinux vital for security on systems using it (there are many).  Many of the critical parts are in the kernel.
  +libsm6,libsm,2:1.2.1-2,X11 Session Management library,,0,https://security-tracker.debian.org/tracker/source-package/libsm,,,,,,,,,,,,,,,139439,,shared-lib,0,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",Just stores X11 sessions for later use.
  +libstdc++6,gcc-4.7,4.7.2-5,GNU Standard C++ Library v3,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175803,c++,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxext6,libxext,2:1.3.1-2+deb7u1,X11 miscellaneous extension library,,1,https://security-tracker.debian.org/tracker/source-package/libxext,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",150854,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",172569,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxfixes3,libxfixes,1:5.0-4+deb7u1,X11 miscellaneous 'fixes' extension library,,1,https://security-tracker.debian.org/tracker/source-package/libxfixes,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",117168,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",136427,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxrandr2,libxrandr,2:1.3.2-2+deb7u1,X11 RandR extension library,,1,https://security-tracker.debian.org/tracker/source-package/libxrandr,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",114975,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",134025,c,shared-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libzrtpcpp2,libzrtpcpp,2.0.0-3,ccrtp extension for zrtp/Zfone support,http://www.gnu.org/software/ccrtp/,3,https://security-tracker.debian.org/tracker/source-package/libzrtpcpp,,,,,,,,,,,,,,,820,,shared-lib,0,1,0,5,"Website points: 0, CVE: 2, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
   ncurses-base,ncurses,5.9-10,basic terminal type definitions,http://invisible-island.net/ncurses/,0,https://security-tracker.debian.org/tracker/source-package/ncurses,https://www.openhub.net/projects/ncurses,GNU Ncurses,"The Ncurses (new curses) library is a free software emulation of curses in System V Release 4.0, and more. It uses Terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SYSV-curses enhancements over BSD Curses.
   
   The ncurses code was developed under GNU/Linux. It has been in use for some time with OpenBSD as the system curses library, and on FreeBSD and NetBSD as an external package. It should port easily to any ANSI/POSIX-conforming UNIX. It has even been ported to OS/2 Warp!
   
   The distribution includes the library and support utilities, including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Full manual pages are provided for the library and tools.
   
  -The Ncurses distribution is available via anonymous FTP at the GNU distribution site",http://www.gnu.org/software/ncurses/,http://ftp.gnu.org/pub/gnu/ncurses,1,2,219912,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,153955,,app-data,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +The Ncurses distribution is available via anonymous FTP at the GNU distribution site",http://www.gnu.org/software/ncurses/,http://ftp.gnu.org/pub/gnu/ncurses,1,2,219912,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,175846,,app-data,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
   ncurses-term,ncurses,5.9-10,additional terminal type definitions,http://invisible-island.net/ncurses/,0,https://security-tracker.debian.org/tracker/source-package/ncurses,https://www.openhub.net/projects/ncurses,GNU Ncurses,"The Ncurses (new curses) library is a free software emulation of curses in System V Release 4.0, and more. It uses Terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SYSV-curses enhancements over BSD Curses.
   
   The ncurses code was developed under GNU/Linux. It has been in use for some time with OpenBSD as the system curses library, and on FreeBSD and NetBSD as an external package. It should port easily to any ANSI/POSIX-conforming UNIX. It has even been ported to OS/2 Warp!
   
   The distribution includes the library and support utilities, including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo. Full manual pages are provided for the library and tools.
   
  -The Ncurses distribution is available via anonymous FTP at the GNU distribution site",http://www.gnu.org/software/ncurses/,http://ftp.gnu.org/pub/gnu/ncurses,1,2,219912,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,144905,,app-data,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  -perl,,5.14.2-21+deb7u2,Larry Wall's Practical Extraction and Report Language,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",153402,perl,metapackage,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -perl-base,perl,5.14.2-21+deb7u2,minimal Perl system,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",153958,perl,program,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -perl-modules,perl,5.14.2-21+deb7u2,Core Perl modules,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",153414,perl,devel-lib,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python-reportbug,reportbug,6.4.4+deb7u1,Python modules for interacting with bug tracking systems,http://alioth.debian.org/projects/reportbug/,1,https://security-tracker.debian.org/tracker/source-package/reportbug,,,,,,,,,,,,,,,129834,python,devel-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python2.7-minimal,python2.7,2.7.3-6+deb7u2,Minimal subset of the Python language (version 2.7),,24,https://security-tracker.debian.org/tracker/source-package/python2.7,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",126116,,program,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -xml-core,,0.13+nmu2,XML infrastructure and XML catalog file support,,0,https://security-tracker.debian.org/tracker/source-package/xml-core,https://www.openhub.net/projects/perl-xml-simple,XML::Simple,"XML::Simple is a Perl module that makes it really easy to read and write XML files. It was originally developed for the purpose of reading and writing config files in XML format, many people find it useful for other purposes.",http://search.cpan.org/dist/XML-Simple/,,0,1,4350,Perl,Artistic_License_2_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,No recent development activity,141584,perl,app-data,0,1,0,4,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 1 , Data only: -3",
  -analog,,2:6.0-19.1,web server log analyzer,http://www.analog.cx/,0,https://security-tracker.debian.org/tracker/source-package/analog,https://www.openhub.net/projects/AnalogCAmie,Analog C:Amie Edition,"Analog was created by Stephen Turner in 1995 as a multi-purpose, multi-platform log file analyser. He maintained the project until 2004, at which point he ceased to update the project. In 2007, as a long-term user of Analog and in light of the release of Windows Vista that could not be identified by Analog, C:Amie has undertaken to maintain Analog and to keep its detection current.",http://camie.dyndns.org/analog/,http://camie.dyndns.org/analog/download/,,,,,,,,,,20686,,program,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","Web log analyzer, analyzes attacker-provided data.  Could conceivably be way to attack via maliciously-formatted data for logging."
  -libaprutil1-dbd-sqlite3,apr-util,1.4.1-3,Apache Portable Runtime Utility Library - SQLite3 Driver,http://apr.apache.org/,1,https://security-tracker.debian.org/tracker/source-package/apr-util,https://www.openhub.net/projects/apr,Apache Portable Runtime,"The mission of the Apache Portable Runtime (APR) project is to create and maintain software libraries that provide a predictable and consistent interface to underlying platform-specific implementations. The primary goal is to provide an API to which software developers may code and be assured of predictable if not identical behaviour regardless of the platform on which their software is built, relieving them of the need to code special-case conditions to work around or take advantage of platform-specific deficiencies or features.",http://apr.apache.org/,,14,67,419947,C,apache_2,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",94950,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -ssl-cert,,1.0.32,simple debconf wrapper for OpenSSL,,0,https://security-tracker.debian.org/tracker/source-package/ssl-cert,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,120563,,program,1,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",See OpenSSL.
  -libressl,,,,,0,https://security-tracker.debian.org/tracker/source-package/libressl,https://www.openhub.net/projects/libressl,libressl,LibreSSL is a FREE version of the SSL/TLS protocol forked from OpenSSL.,http://www.libressl.org/,,30,131,311828,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",0,,,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0","Fork of OpenSSL. HAS Home Page, Can Download as tarball,  VERY Active on Github https://github.com/libressl-portable/portable ++"
  -bootp,,2.4.3-18,server for the bootp protocol with DHCP support,ftp://ftp.ntplx.net/pub/networking/bootp/,0,https://security-tracker.debian.org/tracker/source-package/bootp,,,,,,,,,,,,,,,113,,program,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0",Bootp has basic seucurity issues.
  -libzrtp,,,,,0,https://security-tracker.debian.org/tracker/source-package/libzrtp,,,,,,,,,,,,,,,0,,,0,1,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",Unclear how widely this is used.
  -libgif4,giflib,4.1.6-10,library for GIF images (library),http://giflib.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/giflib,https://www.openhub.net/projects/giflib,giflib -- A library for processing GIFs,"A library for rendering and generating GIF image files. This is the GIF service code in C used for over two decades by graphics applications, web browsers, game consoles, ATMs, and pretty much anything else that throws pixels on a display. Simple, stable, bulletproof, and no longer parent-encumbered.",http://sourceforge.net/projects/giflib,,4,13,11892,C,BSD-3-Clause,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,91166,c,shared-lib,0,1,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Widely-used format that is decompressed and provided by attackers. HAS Home Page, Active issue tracker, Mailing list, public repo. ++"
  -fail2ban,,0.8.6-3wheezy3,ban hosts that cause multiple authentication errors,http://www.fail2ban.org,4,https://security-tracker.debian.org/tracker/source-package/fail2ban,https://www.openhub.net/projects/fail2ban,fail2ban,Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates firewall rules to reject the IP address.,http://www.fail2ban.org/wiki/index.php/Main_Page,http://www.fail2ban.org/wiki/index.php/Downloads,38,103,11081,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",15809,python,program,0,1,1,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0","Used on 10% of Debian installations according to popcon thus millions of users,Monitors and parses log files and  executes commands to manipulate firewalls based on parsed logfiles (thus possibility of injection) usually runs as root"
  -parted,,2.3-12,disk partition manipulator,http://www.gnu.org/software/parted,0,https://security-tracker.debian.org/tracker/source-package/parted,https://www.openhub.net/projects/gparted,GNU Parted,"GNU Parted is an industrial-strength package for creating, destroying, resizing, checking and copying partitions, and the file systems on them. This is useful for creating space for new operating systems, reorganising disk usage, copying data on hard disks and disk imaging.",http://www.gnu.org/software/parted,http://www.gnu.org/software/parted,8,75,264447,C,gpl3,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",60607,c,program,0,0,1,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",
  -bsdmainutils,,9.0.3,collection of more utilities from FreeBSD,,0,https://security-tracker.debian.org/tracker/source-package/bsdmainutils,https://www.openhub.net/projects/freebsd,FreeBSD,"FreeBSD is an advanced operating system for x86 compatible (including Pentium and Athlon), amd64 compatible (including Opteron, Athlon64, and EM64T), UltraSPARC, IA-64, PC-98, (32-bit and 64-bit) MIPS and ARM architectures. It is derived from BSD, the version of UNIX developed at the University of California, Berkeley. It is developed and maintained by a large team of individuals. Additional platforms are in various stages of development.",https://github.com/trueos/trueos,https://github.com/trueos/trueos/downloads,193,684,14595925,C,BSD-2-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153847,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -cpp,gcc-defaults (1.120),4:4.7.2-1,GNU C preprocessor (cpp),,0,https://security-tracker.debian.org/tracker/source-package/gcc-defaults,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",127406,c,dummy,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -dash,,0.5.7-3,POSIX-compliant shell,http://gondor.apana.org.au/~herbert/dash/,0,https://security-tracker.debian.org/tracker/source-package/dash,https://www.openhub.net/projects/dash,DASH,DASH is a POSIX-compliant implementation of /bin/sh that aims to be as small as possible.,http://gondor.apana.org.au/~herbert/dash/,http://gondor.apana.org.au/~herbert/dash/files/,9,39,13391,C,bsd,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",147748,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -dictionaries-common,,1.12.11,Common utilities for spelling dictionary tools,http://dict-common.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/dictionaries-common,https://www.openhub.net/projects/dict-common,dictionaries-common for Debian,dictionaries-common is a package for the Debian system intended to provide the infrastructure and automatic configuration for spelling tools and dictionaries packages.  It also provides a Policy for those matters.,http://sourceforge.net/projects/dict-common,,,,,,,,,,,135961,lisp,plugin,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -findutils,,4.4.2-4,"utilities for finding files--find, xargs",http://savannah.gnu.org/projects/findutils/,0,https://security-tracker.debian.org/tracker/source-package/findutils,https://www.openhub.net/projects/findutils,GNU findutils,"GNU findutils includes find, xargs, locate and updatedb.  These tools proivide ways to search for files on your system by specifying what kind of file you're looking for.",http://savannah.gnu.org/projects/findutils/,,7,30,18425,C,gpl3_or_later,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153958,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -gcc,gcc-defaults (1.120),4:4.7.2-1,GNU C compiler,,0,https://security-tracker.debian.org/tracker/source-package/gcc-defaults,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",100860,,metapackage,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -gettext-base,gettext,0.18.1.1-9,GNU Internationalization utilities for the base system,http://www.gnu.org/software/gettext/,0,https://security-tracker.debian.org/tracker/source-package/gettext,https://www.openhub.net/projects/gettext,gettext,gettext is the GNU internationalization (i18n) library. It is commonly used for writing multilingual programs.,http://savannah.gnu.org/projects/gettext/,http://ftp.gnu.org/gnu/gettext,16,45,359627,C,gpl gpl3_or_later lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",152502,,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -groff-base,groff,1.21-9,GNU troff text-formatting system (base system components),http://groff.ffii.org/,0,https://security-tracker.debian.org/tracker/source-package/groff,https://www.openhub.net/projects/groff,GNU troff,The groff (GNU Troff) software is a typesetting package which reads plain text mixed with formatting commands and produces formatted output. Groff now supports HTML.,http://www.gnu.org/software/groff/,http://www.gnu.org/software/groff/#downloading,20,33,137684,C++,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",153823,c++,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The Ncurses distribution is available via anonymous FTP at the GNU distribution site",http://www.gnu.org/software/ncurses/,http://ftp.gnu.org/pub/gnu/ncurses,1,2,219912,C,mit,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,166150,,app-data,0,0,0,5,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
  +parted,,2.3-12,disk partition manipulator,http://www.gnu.org/software/parted,0,https://security-tracker.debian.org/tracker/source-package/parted,https://www.openhub.net/projects/gparted,GNU Parted,"GNU Parted is an industrial-strength package for creating, destroying, resizing, checking and copying partitions, and the file systems on them. This is useful for creating space for new operating systems, reorganising disk usage, copying data on hard disks and disk imaging.",http://www.gnu.org/software/parted,http://www.gnu.org/software/parted,8,75,264447,C,gpl3,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",72767,c,program,0,0,1,5,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 1 , Data only: 0",
  +perl,,5.14.2-21+deb7u2,Larry Wall's Practical Extraction and Report Language,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",175210,perl,metapackage,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +perl-base,perl,5.14.2-21+deb7u2,minimal Perl system,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",175851,perl,program,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +perl-modules,perl,5.14.2-21+deb7u2,Core Perl modules,http://dev.perl.org/perl5/,21,https://security-tracker.debian.org/tracker/source-package/perl,https://www.openhub.net/projects/perl,Perl,"Perl is a general-purpose programming language originally developed for text manipulation and now used for a wide range of tasks including system administration, web development, network programming, GUI development, and more. Its major features include support for multiple programming paradigms (procedural, object-oriented, and functional styles), automatic memory management, built-in support for text processing, and a large collection of third-party modules.",http://www.perl.org/,http://www.perl.org/get.html,87,1211,1048297,Perl,artistic GNU_General_Public_License_1_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",175225,perl,devel-lib,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python-reportbug,reportbug,6.4.4+deb7u1,Python modules for interacting with bug tracking systems,http://alioth.debian.org/projects/reportbug/,1,https://security-tracker.debian.org/tracker/source-package/reportbug,,,,,,,,,,,,,,,149862,python,devel-lib,0,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python2.7-minimal,python2.7,2.7.3-6+deb7u2,Minimal subset of the Python language (version 2.7),,24,https://security-tracker.debian.org/tracker/source-package/python2.7,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",146155,,program,0,0,0,5,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +sendmail,,8.14.4-4,"powerful, efficient, and scalable Mail Transport Agent",http://www.sendmail.org,1,https://security-tracker.debian.org/tracker/source-package/sendmail,https://www.openhub.net/projects/4536,Sendmail,"Sendmail is a remarkably flexible program, supporting many kinds of mail transfer and delivery including the overwhelmingly popular SMTP.",http://www.sendmail.org/,http://www.sendmail.com/sm/open_source/download/,,,,,sendmail,,,,,1790,,metapackage,1,0,0,5,"Website points: 0, CVE: 1, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0","This is a widely-used mail transfer agent (MTA). Sendmail main site https://www.sendmail.com/sm/open_source/
  +No public repo found.  However, they have tarball    snapshots   ; on 2015-03-13 the current snapshot was 2015-03-06. This indicates active development, but its development seems opaque so difficult to say more. Version 8.15.1 posted 2014-12-06."
  +ssl-cert,,1.0.32,simple debconf wrapper for OpenSSL,,0,https://security-tracker.debian.org/tracker/source-package/ssl-cert,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,137047,,program,1,0,0,5,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 2 , Data only: 0",See OpenSSL.
  +xml-core,,0.13+nmu2,XML infrastructure and XML catalog file support,,0,https://security-tracker.debian.org/tracker/source-package/xml-core,https://www.openhub.net/projects/perl-xml-simple,XML::Simple,"XML::Simple is a Perl module that makes it really easy to read and write XML files. It was originally developed for the purpose of reading and writing config files in XML format, many people find it useful for other purposes.",http://search.cpan.org/dist/XML-Simple/,,0,1,4350,Perl,Artistic_License_2_0 gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,No recent development activity,162775,perl,app-data,0,1,0,5,"Website points: 0, CVE: 0, 12-month contributor: 5, Popularity: 2, Language: 0, Exposure: 1 , Data only: -3",
  +bootp,,2.4.3-18,server for the bootp protocol with DHCP support,ftp://ftp.ntplx.net/pub/networking/bootp/,0,https://security-tracker.debian.org/tracker/source-package/bootp,,,,,,,,,,,,,,,122,,program,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0",Bootp has basic seucurity issues.
  +bsdmainutils,,9.0.3,collection of more utilities from FreeBSD,,0,https://security-tracker.debian.org/tracker/source-package/bsdmainutils,https://www.openhub.net/projects/freebsd,FreeBSD,"FreeBSD is an advanced operating system for x86 compatible (including Pentium and Athlon), amd64 compatible (including Opteron, Athlon64, and EM64T), UltraSPARC, IA-64, PC-98, (32-bit and 64-bit) MIPS and ARM architectures. It is derived from BSD, the version of UNIX developed at the University of California, Berkeley. It is developed and maintained by a large team of individuals. Additional platforms are in various stages of development.",https://github.com/trueos/trueos,https://github.com/trueos/trueos/downloads,193,684,14595925,C,BSD-2-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",175731,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +cpp,gcc-defaults (1.120),4:4.7.2-1,GNU C preprocessor (cpp),,0,https://security-tracker.debian.org/tracker/source-package/gcc-defaults,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",146606,c,dummy,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +cpp-4.6,gcc-4.6,4.6.3-14,GNU C preprocessor,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",36165,c,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +cryptsetup,,2:1.4.3-4,disk encryption support - startup scripts,http://code.google.com/p/cryptsetup/,0,https://security-tracker.debian.org/tracker/source-package/cryptsetup,https://www.openhub.net/projects/cryptsetup,cryptsetup/LUKS,"Cryptsetup is utility used to conveniently setup disk encryption based on dm-crypt kernel module.
  +
  +These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt (including VeraCrypt extension) format.
  +
  +Project also includes veritysetup utility used to conveniently setup dm-verity block integrity checking kernel module.",https://gitlab.com/cryptsetup/cryptsetup/wikis/home,https://www.kernel.org/pub/linux/utils/cryptsetup/,7,16,19270,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",11606,c,program,0,0,1,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","This is used to set up disk encryption (at rest), e.g., Linux Unified Key Setup (LUKS).  Home page http://code.google.com/p/cryptsetup , uses git. Tracker in active use.  Latest version 1.6.6 released 2014-08-16.  Development ongoing; 8 commits in February 2015. ++"
  +dash,,0.5.7-3,POSIX-compliant shell,http://gondor.apana.org.au/~herbert/dash/,0,https://security-tracker.debian.org/tracker/source-package/dash,https://www.openhub.net/projects/dash,DASH,DASH is a POSIX-compliant implementation of /bin/sh that aims to be as small as possible.,http://gondor.apana.org.au/~herbert/dash/,http://gondor.apana.org.au/~herbert/dash/files/,9,39,13391,C,bsd,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",169336,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +dictionaries-common,,1.12.11,Common utilities for spelling dictionary tools,http://dict-common.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/dictionaries-common,https://www.openhub.net/projects/dict-common,dictionaries-common for Debian,dictionaries-common is a package for the Debian system intended to provide the infrastructure and automatic configuration for spelling tools and dictionaries packages.  It also provides a Policy for those matters.,http://sourceforge.net/projects/dict-common,,,,,,,,,,,156753,lisp,plugin,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +findutils,,4.4.2-4,"utilities for finding files--find, xargs",http://savannah.gnu.org/projects/findutils/,0,https://security-tracker.debian.org/tracker/source-package/findutils,https://www.openhub.net/projects/findutils,GNU findutils,"GNU findutils includes find, xargs, locate and updatedb.  These tools proivide ways to search for files on your system by specifying what kind of file you're looking for.",http://savannah.gnu.org/projects/findutils/,,7,30,18425,C,gpl3_or_later,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",175849,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +gcc,gcc-defaults (1.120),4:4.7.2-1,GNU C compiler,,0,https://security-tracker.debian.org/tracker/source-package/gcc-defaults,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",113304,,metapackage,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +gcc-4.6,,4.6.3-14,GNU C compiler,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",35732,c++,program,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +gcc-4.7,,4.7.2-5,GNU C compiler,http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.7,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",52893,,,0,0,0,4,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +gettext-base,gettext,0.18.1.1-9,GNU Internationalization utilities for the base system,http://www.gnu.org/software/gettext/,0,https://security-tracker.debian.org/tracker/source-package/gettext,https://www.openhub.net/projects/gettext,gettext,gettext is the GNU internationalization (i18n) library. It is commonly used for writing multilingual programs.,http://savannah.gnu.org/projects/gettext/,http://ftp.gnu.org/gnu/gettext,16,45,359627,C,gpl gpl3_or_later lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",174323,,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +groff-base,groff,1.21-9,GNU troff text-formatting system (base system components),http://groff.ffii.org/,0,https://security-tracker.debian.org/tracker/source-package/groff,https://www.openhub.net/projects/groff,GNU troff,The groff (GNU Troff) software is a typesetting package which reads plain text mixed with formatting commands and produces formatted output. Groff now supports HTML.,http://www.gnu.org/software/groff/,http://www.gnu.org/software/groff/#downloading,20,33,137684,C++,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",175703,c++,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   info,texinfo,4.13a.dfsg.1-10,Standalone GNU Info documentation browser,,0,https://security-tracker.debian.org/tracker/source-package/texinfo,https://www.openhub.net/projects/texinfo,Texinfo,"Texinfo is the official documentation format of the GNU project. It was invented by Richard Stallman and Bob Chassell many years ago, loosely based on Brian Reid's Scribe and other formatting languages of the time. It is used by many non-GNU projects as well.
   
  -Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,150528,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -ispell,,3.3.02-6,International Ispell (an interactive spelling corrector),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,121346,,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,171724,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +ispell,,3.3.02-6,International Ispell (an interactive spelling corrector),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,140204,,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
   kmod,,9-3,tools for managing Linux kernel modules,,0,https://security-tracker.debian.org/tracker/source-package/kmod,https://www.openhub.net/projects/kmod,kmod,"Library and programs to manage Linux Kernel Modules.
   
   This project consists of a library (libkmod) that does the same work as traditional module-init-tools (m-i-t) but is easily usable by other programs that may need to check or load kernel modules, such as udev, systemd, iptables, ...
   
  -The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",126854,,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libasprintf0c2,gettext,0.18.1.1-9,GNU library to use fprintf and friends in C++,http://www.gnu.org/software/gettext/,0,https://security-tracker.debian.org/tracker/source-package/gettext,https://www.openhub.net/projects/gettext,gettext,gettext is the GNU internationalization (i18n) library. It is commonly used for writing multilingual programs.,http://savannah.gnu.org/projects/gettext/,http://ftp.gnu.org/gnu/gettext,16,45,359627,C,gpl gpl3_or_later lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",126633,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libclass-isa-perl,,0.36-3,report the search path for a class's ISA tree,http://search.cpan.org/dist/Class-ISA/,0,https://security-tracker.debian.org/tracker/source-package/libclass-isa-perl,,,,,,,,,,,,,,,119079,perl,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libdrm-intel1,libdrm,2.4.40-1~deb7u2,Userspace interface to intel-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",96374,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libdrm-nouveau1a,libdrm,2.4.40-1~deb7u2,Userspace interface to nouveau-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",42840,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libdrm-radeon1,libdrm,2.4.40-1~deb7u2,Userspace interface to radeon-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",97165,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libdrm2,libdrm,2.4.40-1~deb7u2,Userspace interface to kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",102183,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",147042,,,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libasprintf0c2,gettext,0.18.1.1-9,GNU library to use fprintf and friends in C++,http://www.gnu.org/software/gettext/,0,https://security-tracker.debian.org/tracker/source-package/gettext,https://www.openhub.net/projects/gettext,gettext,gettext is the GNU internationalization (i18n) library. It is commonly used for writing multilingual programs.,http://savannah.gnu.org/projects/gettext/,http://ftp.gnu.org/gnu/gettext,16,45,359627,C,gpl gpl3_or_later lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",146643,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libclass-isa-perl,,0.36-3,report the search path for a class's ISA tree,http://search.cpan.org/dist/Class-ISA/,0,https://security-tracker.debian.org/tracker/source-package/libclass-isa-perl,,,,,,,,,,,,,,,138028,perl,,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libdrm-intel1,libdrm,2.4.40-1~deb7u2,Userspace interface to intel-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",113469,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libdrm-radeon1,libdrm,2.4.40-1~deb7u2,Userspace interface to radeon-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",114409,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libdrm2,libdrm,2.4.40-1~deb7u2,Userspace interface to kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",119736,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libkmod2,kmod,9-3,libkmod shared library,,0,https://security-tracker.debian.org/tracker/source-package/kmod,https://www.openhub.net/projects/kmod,kmod,"Library and programs to manage Linux Kernel Modules.
   
   This project consists of a library (libkmod) that does the same work as traditional module-init-tools (m-i-t) but is easily usable by other programs that may need to check or load kernel modules, such as udev, systemd, iptables, ...
   
  -The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",126944,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libmpc2,mpclib,0.9-4,multiple precision complex floating-point library,http://www.multiprecision.org/mpc/,0,https://security-tracker.debian.org/tracker/source-package/mpclib,,,,,,,,,,,,,,,62707,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libpci3,pciutils,1:3.1.9-6,Linux PCI Utilities (shared library),http://atrey.karlin.mff.cuni.cz/~mj/pciutils.shtml,0,https://security-tracker.debian.org/tracker/source-package/pciutils,https://www.openhub.net/projects/pciutils,pciutils,"PCI utilities for many *nix systems and hopefully even Windows: lspci and setpci, for now.",http://mj.ucw.cz/pciutils.shtml,,7,36,10999,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",151096,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libpth20,pth,2.0.7-16,The GNU Portable Threads,http://www.gnu.org/software/pth/,0,https://security-tracker.debian.org/tracker/source-package/pth,,,,,,,,,,,,,,,134329,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libsemanage-common,libsemanage,2.1.6-6,Common files for SELinux policy management libraries,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsemanage,https://www.openhub.net/projects/libsemanage,libsemanage,An interface for SELinux management,https://github.com/pld-linux/libsemanage,,1,9,0,,,Stable Y-O-Y development activity,"Mature, well-established codebase",,Only a single active developer,127838,,app-data,0,0,1,3,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 1 , Data only: -3",
  -libsepol1,libsepol,2.1.4-3,SELinux library for manipulating binary security policies,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsepol,https://www.openhub.net/projects/serefpolicy,SELinux reference policy,SELinux reference policy,http://oss.tresys.com/projects/refpolicy,http://oss.tresys.com/projects/refpolicy/wiki/DownloadRelease,6,41,8552,Python,,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,153848,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libsigc++-2.0-0c2a,libsigc++-2.0,2.2.10-0.2,type-safe Signal Framework for C++ - runtime,,0,https://security-tracker.debian.org/tracker/source-package/libsigc++-2.0,https://www.openhub.net/projects/libsigc,libsigc++,"libsigc++ implements a typesafe callback system for standard C++. It allows you to define signals and to connect those signals to any callback function, either global or a member function, regardless of whether it is static or virtual.",http://libsigc.sourceforge.net/,http://libsigc.sourceforge.net/stable.shtml,5,33,24107,C++,lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,153476,c++,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libswitch-perl,,2.16-2,switch statement for Perl,http://search.cpan.org/dist/Switch/,0,https://security-tracker.debian.org/tracker/source-package/libswitch-perl,,,,,,,,,,,,,,,119376,perl,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libtext-charwidth-perl,libtext-charwidth-perl (0.04-7),0.04-7+b1,get display widths of characters on the terminal,http://search.cpan.org/search?module=Text::CharWidth,0,https://security-tracker.debian.org/tracker/source-package/libtext-charwidth-perl,,,,,,,,,,,,,,,153618,perl,devel-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libtext-iconv-perl,,1.7-5,converts between character sets in Perl,http://search.cpan.org/search?module=Text::Iconv,0,https://security-tracker.debian.org/tracker/source-package/libtext-iconv-perl,,,,,,,,,,,,,,,153815,perl,devel-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libtext-wrapi18n-perl,,0.06-7,internationalized substitute of Text::Wrap,http://search.cpan.org/search?module=Text::WrapI18N,0,https://security-tracker.debian.org/tracker/source-package/libtext-wrapi18n-perl,,,,,,,,,,,,,,,153611,perl,devel-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libtokyocabinet9,tokyocabinet,1.4.47-2,Tokyo Cabinet Database Libraries [runtime],http://fallabs.com/tokyocabinet/,0,https://security-tracker.debian.org/tracker/source-package/tokyocabinet,https://www.openhub.net/projects/tokyocabinet,Tokyo Cabinet,"Tokyo Cabinet is the successor of QDBM, a high performance database library similar to the DBM family. It also supports hash and B-tree databases and does not require any server process. The overall speed is improved compared to QDBM.",http://fallabs.com/tokyocabinet/,,,,,,,,,,,112199,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libusb-0.1-4,libusb,2:0.1.12-20+nmu1,userspace USB programming library,http://www.linux-usb.org/,0,https://security-tracker.debian.org/tracker/source-package/libusb,https://www.openhub.net/projects/libusb,libusb,libusb aims at creating a library for use by user level applications to access USB devices regardless of OS,http://libusb.sourceforge.net/,http://libusb.sourceforge.net/download.html#stable,13,94,35845,C,lgpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",153946,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libx11-data,libx11,2:1.5.0-1+deb7u1,X11 client-side library,,4,https://security-tracker.debian.org/tracker/source-package/libx11,https://www.openhub.net/projects/libx11,libX11,git://anongit.freedesktop.org/xorg/lib/libX11,https://github.com/mirror/libX11,https://github.com/mirror/libX11/downloads,7,136,221808,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",151865,,app-data,0,0,0,3,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",147144,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libmpc2,mpclib,0.9-4,multiple precision complex floating-point library,http://www.multiprecision.org/mpc/,0,https://security-tracker.debian.org/tracker/source-package/mpclib,,,,,,,,,,,,,,,69531,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libpci3,pciutils,1:3.1.9-6,Linux PCI Utilities (shared library),http://atrey.karlin.mff.cuni.cz/~mj/pciutils.shtml,0,https://security-tracker.debian.org/tracker/source-package/pciutils,https://www.openhub.net/projects/pciutils,pciutils,"PCI utilities for many *nix systems and hopefully even Windows: lspci and setpci, for now.",http://mj.ucw.cz/pciutils.shtml,,7,36,10999,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",172900,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libpth20,pth,2.0.7-16,The GNU Portable Threads,http://www.gnu.org/software/pth/,0,https://security-tracker.debian.org/tracker/source-package/pth,,,,,,,,,,,,,,,154768,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libressl,,,,,0,https://security-tracker.debian.org/tracker/source-package/libressl,https://www.openhub.net/projects/libressl,libressl,LibreSSL is a FREE version of the SSL/TLS protocol forked from OpenSSL.,http://www.libressl.org/,,30,131,311828,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",,,,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 2 , Data only: 0","Fork of OpenSSL. HAS Home Page, Can Download as tarball,  VERY Active on Github https://github.com/libressl-portable/portable ++"
  +libsemanage-common,libsemanage,2.1.6-6,Common files for SELinux policy management libraries,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsemanage,https://www.openhub.net/projects/libsemanage,libsemanage,An interface for SELinux management,https://github.com/pld-linux/libsemanage,,1,9,0,,,Stable Y-O-Y development activity,"Mature, well-established codebase",,Only a single active developer,148076,,app-data,0,0,1,4,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 0, Exposure: 1 , Data only: -3",
  +libsepol1,libsepol,2.1.4-3,SELinux library for manipulating binary security policies,http://userspace.selinuxproject.org/,0,https://security-tracker.debian.org/tracker/source-package/libsepol,https://www.openhub.net/projects/serefpolicy,SELinux reference policy,SELinux reference policy,http://oss.tresys.com/projects/refpolicy,http://oss.tresys.com/projects/refpolicy/wiki/DownloadRelease,6,41,8552,Python,,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,175715,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libsigc++-2.0-0c2a,libsigc++-2.0,2.2.10-0.2,type-safe Signal Framework for C++ - runtime,,0,https://security-tracker.debian.org/tracker/source-package/libsigc++-2.0,https://www.openhub.net/projects/libsigc,libsigc++,"libsigc++ implements a typesafe callback system for standard C++. It allows you to define signals and to connect those signals to any callback function, either global or a member function, regardless of whether it is static or virtual.",http://libsigc.sourceforge.net/,http://libsigc.sourceforge.net/stable.shtml,5,33,24107,C++,lgpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,175341,c++,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libswitch-perl,,2.16-2,switch statement for Perl,http://search.cpan.org/dist/Switch/,0,https://security-tracker.debian.org/tracker/source-package/libswitch-perl,,,,,,,,,,,,,,,138384,perl,,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libtext-charwidth-perl,libtext-charwidth-perl (0.04-7),0.04-7+b1,get display widths of characters on the terminal,http://search.cpan.org/search?module=Text::CharWidth,0,https://security-tracker.debian.org/tracker/source-package/libtext-charwidth-perl,,,,,,,,,,,,,,,175477,perl,devel-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libtext-iconv-perl,,1.7-5,converts between character sets in Perl,http://search.cpan.org/search?module=Text::Iconv,0,https://security-tracker.debian.org/tracker/source-package/libtext-iconv-perl,,,,,,,,,,,,,,,175696,perl,devel-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libtext-wrapi18n-perl,,0.06-7,internationalized substitute of Text::Wrap,http://search.cpan.org/search?module=Text::WrapI18N,0,https://security-tracker.debian.org/tracker/source-package/libtext-wrapi18n-perl,,,,,,,,,,,,,,,175468,perl,devel-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libtokyocabinet9,tokyocabinet,1.4.47-2,Tokyo Cabinet Database Libraries [runtime],http://fallabs.com/tokyocabinet/,0,https://security-tracker.debian.org/tracker/source-package/tokyocabinet,https://www.openhub.net/projects/tokyocabinet,Tokyo Cabinet,"Tokyo Cabinet is the successor of QDBM, a high performance database library similar to the DBM family. It also supports hash and B-tree databases and does not require any server process. The overall speed is improved compared to QDBM.",http://fallabs.com/tokyocabinet/,,,,,,,,,,,130762,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libusb-0.1-4,libusb,2:0.1.12-20+nmu1,userspace USB programming library,http://www.linux-usb.org/,0,https://security-tracker.debian.org/tracker/source-package/libusb,https://www.openhub.net/projects/libusb,libusb,libusb aims at creating a library for use by user level applications to access USB devices regardless of OS,http://libusb.sourceforge.net/,http://libusb.sourceforge.net/download.html#stable,13,94,35845,C,lgpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",175834,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libx11-data,libx11,2:1.5.0-1+deb7u1,X11 client-side library,,4,https://security-tracker.debian.org/tracker/source-package/libx11,https://www.openhub.net/projects/libx11,libX11,git://anongit.freedesktop.org/xorg/lib/libX11,https://github.com/mirror/libX11,https://github.com/mirror/libX11/downloads,7,136,221808,C,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",173599,,app-data,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
   libxapian22,xapian-core,1.2.12-2,Search engine library,http://xapian.org/,0,https://security-tracker.debian.org/tracker/source-package/xapian-core,https://www.openhub.net/projects/xapian,Xapian,"Xapian is an Open Source Search Engine Library, released under the GPL. It's written in C++, with bindings to allow use from Perl, Python, PHP, Java, Tcl, C#, Ruby, Lua and Erlang (so far!)
   
  -Xapian is a highly adaptable toolkit which allows developers to easily add advanced indexing and search facilities to their own applications. It supports the Probabilistic Information Retrieval model and also supports a rich set of boolean query operators.",http://xapian.org/,http://xapian.org/download,6,28,124435,C++,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,145305,c++,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +Xapian is a highly adaptable toolkit which allows developers to easily add advanced indexing and search facilities to their own applications. It supports the Probabilistic Information Retrieval model and also supports a rich set of boolean query operators.",http://xapian.org/,http://xapian.org/download,6,28,124435,C++,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,166467,c++,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxaw7,libxaw,2:1.0.10-2,X11 Athena Widget library,,0,https://security-tracker.debian.org/tracker/source-package/libxaw,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",105489,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",123043,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxcomposite1,libxcomposite,1:0.4.3-2,X11 Composite extension library,,0,https://security-tracker.debian.org/tracker/source-package/libxcomposite,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",113769,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",132804,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxdamage1,libxdamage,1:1.1.3-2,X11 damaged region extension library,,0,https://security-tracker.debian.org/tracker/source-package/libxdamage,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",116066,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",135287,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxdmcp6,libxdmcp,1:1.1.1-1,X11 Display Manager Control Protocol library,,0,https://security-tracker.debian.org/tracker/source-package/libxdmcp,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",151962,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",173715,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxkbfile1,libxkbfile,1:1.0.8-1,X11 keyboard file manipulation library,,0,https://security-tracker.debian.org/tracker/source-package/libxkbfile,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",86690,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",102950,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxmu6,libxmu,2:1.1.1-1,X11 miscellaneous utility library,,0,https://security-tracker.debian.org/tracker/source-package/libxmu,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",106830,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",124487,,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxmuu1,libxmu,2:1.1.1-1,X11 miscellaneous micro-utility library,,0,https://security-tracker.debian.org/tracker/source-package/libxmu,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",146245,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",167687,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   libxpm4,libxpm,1:3.5.10-1,X11 pixmap library,,0,https://security-tracker.debian.org/tracker/source-package/libxpm,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",125399,c,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",144447,c,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +libzrtp,,,,,0,https://security-tracker.debian.org/tracker/source-package/libzrtp,,,,,,,,,,,,,,,,,,0,1,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",Unclear how widely this is used.
   linux-image-amd64,linux-latest (46),3.2+46,Linux for 64-bit PCs (meta-package),,0,https://security-tracker.debian.org/tracker/source-package/linux-latest,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
   
  -!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",89860,,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -lsb-base,lsb,4.1+Debian8+deb7u1,Linux Standard Base 4.1 init script functionality,http://www.linuxfoundation.org/collaborate/workgroups/lsb,0,https://security-tracker.debian.org/tracker/source-package/lsb,https://www.openhub.net/projects/lsb,Linux Standard Base,"The Linux Standard Base was created to lower the overall costs of supporting the Linux platform. LSB identifies and specifies the behavior of common functionality across distributions; distributions are then encouraged to stay compatible with that common base. By reducing the differences between individual Linux distributions, the LSB greatly reduces the costs involved with porting applications to different distributions, as well as lowering the cost and effort involved in after-market support of those applications.",http://www.linuxbase.org,https://www.linuxfoundation.org/collaborate/workgroups/lsb/download,6,61,4888477,C,Artistic_License_2_0 BSD-3-Clause GNU_Free_Documentation_License gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,153941,shell,TODO,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -lsb-release,lsb,4.1+Debian8+deb7u1,Linux Standard Base version reporting utility,http://www.linuxfoundation.org/collaborate/workgroups/lsb,0,https://security-tracker.debian.org/tracker/source-package/lsb,https://www.openhub.net/projects/lsb,Linux Standard Base,"The Linux Standard Base was created to lower the overall costs of supporting the Linux platform. LSB identifies and specifies the behavior of common functionality across distributions; distributions are then encouraged to stay compatible with that common base. By reducing the differences between individual Linux distributions, the LSB greatly reduces the costs involved with porting applications to different distributions, as well as lowering the cost and effort involved in after-market support of those applications.",http://www.linuxbase.org,https://www.linuxfoundation.org/collaborate/workgroups/lsb/download,6,61,4888477,C,Artistic_License_2_0 BSD-3-Clause GNU_Free_Documentation_License gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,139587,python,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -make,make-dfsg,3.81-8.2,An utility for Directing compilation.,http://www.gnu.org/software/make/,0,https://security-tracker.debian.org/tracker/source-package/make-dfsg,https://www.openhub.net/projects/make,GNU Make,Make is a tool which controls the generation of executables and other non-source files of a program from the program's source files.,http://www.gnu.org/software/make/,,10,48,37738,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",98592,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -man-db,,2.6.2-1,on-line manual pager,http://man-db.nongnu.org/,0,https://security-tracker.debian.org/tracker/source-package/man-db,https://www.openhub.net/projects/man-db,"man-db, the on-line manual database","man-db is an implementation of the standard Unix documentation system accessed using the man command. It is used by several popular GNU/Linux distributions, including Debian, Fedora, SuSE and Ubuntu.",http://man-db.nongnu.org/,http://savannah.nongnu.org/files/?group=man-db,8,40,188734,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",153221,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",104053,,,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +lsb-base,lsb,4.1+Debian8+deb7u1,Linux Standard Base 4.1 init script functionality,http://www.linuxfoundation.org/collaborate/workgroups/lsb,0,https://security-tracker.debian.org/tracker/source-package/lsb,https://www.openhub.net/projects/lsb,Linux Standard Base,"The Linux Standard Base was created to lower the overall costs of supporting the Linux platform. LSB identifies and specifies the behavior of common functionality across distributions; distributions are then encouraged to stay compatible with that common base. By reducing the differences between individual Linux distributions, the LSB greatly reduces the costs involved with porting applications to different distributions, as well as lowering the cost and effort involved in after-market support of those applications.",http://www.linuxbase.org,https://www.linuxfoundation.org/collaborate/workgroups/lsb/download,6,61,4888477,C,Artistic_License_2_0 BSD-3-Clause GNU_Free_Documentation_License gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,175833,shell,TODO,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +lsb-release,lsb,4.1+Debian8+deb7u1,Linux Standard Base version reporting utility,http://www.linuxfoundation.org/collaborate/workgroups/lsb,0,https://security-tracker.debian.org/tracker/source-package/lsb,https://www.openhub.net/projects/lsb,Linux Standard Base,"The Linux Standard Base was created to lower the overall costs of supporting the Linux platform. LSB identifies and specifies the behavior of common functionality across distributions; distributions are then encouraged to stay compatible with that common base. By reducing the differences between individual Linux distributions, the LSB greatly reduces the costs involved with porting applications to different distributions, as well as lowering the cost and effort involved in after-market support of those applications.",http://www.linuxbase.org,https://www.linuxfoundation.org/collaborate/workgroups/lsb/download,6,61,4888477,C,Artistic_License_2_0 BSD-3-Clause GNU_Free_Documentation_License gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,160344,python,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +make,make-dfsg,3.81-8.2,An utility for Directing compilation.,http://www.gnu.org/software/make/,0,https://security-tracker.debian.org/tracker/source-package/make-dfsg,https://www.openhub.net/projects/make,GNU Make,Make is a tool which controls the generation of executables and other non-source files of a program from the program's source files.,http://www.gnu.org/software/make/,,10,48,37738,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",110852,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +man-db,,2.6.2-1,on-line manual pager,http://man-db.nongnu.org/,0,https://security-tracker.debian.org/tracker/source-package/man-db,https://www.openhub.net/projects/man-db,"man-db, the on-line manual database","man-db is an implementation of the standard Unix documentation system accessed using the man command. It is used by several popular GNU/Linux distributions, including Debian, Fedora, SuSE and Ubuntu.",http://man-db.nongnu.org/,http://savannah.nongnu.org/files/?group=man-db,8,40,188734,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",174955,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +mercurial,,2.2.2-3,"easy-to-use, scalable distributed version control system",http://mercurial.selenic.com/,3,https://security-tracker.debian.org/tracker/source-package/mercurial,https://www.openhub.net/projects/mercurial,Mercurial,"Mercurial is a fast, lightweight Source Control Management system designed for efficient handling of very large distributed projects.",http://mercurial.selenic.com/,http://mercurial.selenic.com/wiki/Download,73,588,260298,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Very large, active development team",12695,python,program,0,1,0,4,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 1 , Data only: 0",
   module-init-tools,kmod,9-3,transitional dummy package (module-init-tools to kmod),,0,https://security-tracker.debian.org/tracker/source-package/kmod,https://www.openhub.net/projects/kmod,kmod,"Library and programs to manage Linux Kernel Modules.
   
   This project consists of a library (libkmod) that does the same work as traditional module-init-tools (m-i-t) but is easily usable by other programs that may need to check or load kernel modules, such as udev, systemd, iptables, ...
   
  -The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",116628,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -netbase,,5,Basic TCP/IP networking system,,0,https://security-tracker.debian.org/tracker/source-package/netbase,,,,,,,,,,,,,,,153931,,app-data,1,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: -3",
  -pciutils,,1:3.1.9-6,Linux PCI Utilities,http://atrey.karlin.mff.cuni.cz/~mj/pciutils.shtml,0,https://security-tracker.debian.org/tracker/source-package/pciutils,https://www.openhub.net/projects/pciutils,pciutils,"PCI utilities for many *nix systems and hopefully even Windows: lspci and setpci, for now.",http://mj.ucw.cz/pciutils.shtml,,7,36,10999,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",152415,,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python-apt,,0.8.8.2,Python interface to libapt-pkg,,0,https://security-tracker.debian.org/tracker/source-package/python-apt,https://www.openhub.net/projects/python-apt,python-apt,"python-apt provides Python bindings for libapt, the backend to Debian's Advanced Package Tool.",http://sourceforge.net/projects/python-apt,,6,37,15852,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,137325,python,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python-apt-common,python-apt,0.8.8.2,Python interface to libapt-pkg (locales),,0,https://security-tracker.debian.org/tracker/source-package/python-apt,https://www.openhub.net/projects/python-apt,python-apt,"python-apt provides Python bindings for libapt, the backend to Debian's Advanced Package Tool.",http://sourceforge.net/projects/python-apt,,6,37,15852,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,136214,,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python-fpconst,fpconst,0.7.2-5,Utilities for handling IEEE 754 floating point special values,http://pypi.python.org/pypi/fpconst,0,https://security-tracker.debian.org/tracker/source-package/fpconst,,,,,,,,,,,,,,,67291,python,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python-minimal,python-defaults,2.7.3-4+deb7u1,minimal subset of the Python language (default version),http://www.python.org/,0,https://security-tracker.debian.org/tracker/source-package/python-defaults,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",151905,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -python2.6-minimal,python2.6,2.6.8-1.1,Minimal subset of the Python language (version 2.6),,26,https://security-tracker.debian.org/tracker/source-package/python2.6,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",94940,c,app-data,0,0,0,3,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +The provided programs try to mimic m-i-t equivalents 1-to-1 and could be used as drop-in replacements in most cases.",http://git.profusion.mobi/cgit.cgi/kmod.git/,http://git.profusion.mobi/cgit.cgi/kmod.git/,15,60,17607,C,lgpl21_or_later,Increasing Y-O-Y development activity,Well-established codebase,Average number of code comments,"Large, active development team",127969,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +netbase,,5.0,Basic TCP/IP networking system,,0,https://security-tracker.debian.org/tracker/source-package/netbase,,,,,,,,,,,,,,,175818,,app-data,1,0,0,4,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 2 , Data only: -3",
  +pciutils,,1:3.1.9-6,Linux PCI Utilities,http://atrey.karlin.mff.cuni.cz/~mj/pciutils.shtml,0,https://security-tracker.debian.org/tracker/source-package/pciutils,https://www.openhub.net/projects/pciutils,pciutils,"PCI utilities for many *nix systems and hopefully even Windows: lspci and setpci, for now.",http://mj.ucw.cz/pciutils.shtml,,7,36,10999,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",174238,,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +python-apt,,0.8.8.2,Python interface to libapt-pkg,,0,https://security-tracker.debian.org/tracker/source-package/python-apt,https://www.openhub.net/projects/python-apt,python-apt,"python-apt provides Python bindings for libapt, the backend to Debian's Advanced Package Tool.",http://sourceforge.net/projects/python-apt,,6,37,15852,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,157725,python,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +python-apt-common,python-apt,0.8.8.2,Python interface to libapt-pkg (locales),,0,https://security-tracker.debian.org/tracker/source-package/python-apt,https://www.openhub.net/projects/python-apt,python-apt,"python-apt provides Python bindings for libapt, the backend to Debian's Advanced Package Tool.",http://sourceforge.net/projects/python-apt,,6,37,15852,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,156720,,,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +python-fpconst,fpconst,0.7.2-5,Utilities for handling IEEE 754 floating point special values,http://pypi.python.org/pypi/fpconst,0,https://security-tracker.debian.org/tracker/source-package/fpconst,,,,,,,,,,,,,,,74445,python,shared-lib,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python-minimal,python-defaults,2.7.3-4+deb7u1,minimal subset of the Python language (default version),http://www.python.org/,0,https://security-tracker.debian.org/tracker/source-package/python-defaults,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",173542,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +python2.6-minimal,python2.6,2.6.8-1.1,Minimal subset of the Python language (version 2.6),,26,https://security-tracker.debian.org/tracker/source-package/python2.6,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",104468,c,app-data,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
   sed,,4.2.1-10,The GNU sed stream editor,http://www.gnu.org/software/sed/,0,https://security-tracker.debian.org/tracker/source-package/sed,https://www.openhub.net/projects/sed,GNU sed,"Sed (streams editor) isn't really a true text editor or text processor. Instead, it is used to filter text, i.e., it takes text input and performs some operation (or set of operations) on it and outputs the modified text. 
   
  -Sed is typically used for extracting part of a file using pattern matching or substituting multiple occurrences of a string within a file.",http://savannah.gnu.org/projects/sed/,,4,16,23676,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,153960,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +Sed is typically used for extracting part of a file using pattern matching or substituting multiple occurrences of a string within a file.",http://savannah.gnu.org/projects/sed/,,4,16,23676,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,175852,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
   sensible-utils,,0.0.7,Utilities for sensible alternative selection,,0,https://security-tracker.debian.org/tracker/source-package/sensible-utils,https://www.openhub.net/projects/debianutils,debianutils,"Miscellaneous utilities specific to Debian
   
   This package provides a number of small utilities which are used primarily by the installation scripts of Debian packages, although you may use them directly.
   
  -The specific utilities included are: installkernel mkboot run-parts savelog sensible-browser sensible-editor sensible-pager tempfile which.",http://packages.debian.org/debianutils,http://packages.debian.org/debianutils,,,,,,,,,,147180,,TODO,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +The specific utilities included are: installkernel mkboot run-parts savelog sensible-browser sensible-editor sensible-pager tempfile which.",http://packages.debian.org/debianutils,http://packages.debian.org/debianutils,,,,,,,,,,168759,,TODO,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
   task-ssh-server,tasksel,3.14.1,SSH server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
   
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",62808,,program,1,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",
  -usbutils,,1:005-3,Linux USB utilities,,0,https://security-tracker.debian.org/tracker/source-package/usbutils,https://www.openhub.net/projects/usbutils,usbutils,USB utilities for Linux,https://github.com/gregkh/usbutils,http://www.kernel.org/pub/linux/utils/usb/usbutils/,7,43,7130,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Large, active development team",133436,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -util-linux-locales,util-linux,2.20.1-5.3,Locales files for util-linux,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",85274,,app-data,0,0,0,3,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",72337,,program,1,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 2 , Data only: 0",
  +usbutils,,1:005-3,Linux USB utilities,,0,https://security-tracker.debian.org/tracker/source-package/usbutils,https://www.openhub.net/projects/usbutils,usbutils,USB utilities for Linux,https://github.com/gregkh/usbutils,http://www.kernel.org/pub/linux/utils/usb/usbutils/,7,43,7130,C,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Large, active development team",153558,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +util-linux-locales,util-linux,2.20.1-5.3,Locales files for util-linux,http://userweb.kernel.org/~kzak/util-linux/,4,https://security-tracker.debian.org/tracker/source-package/util-linux,https://www.openhub.net/projects/util-linux-ng,util-linux,util-linux is a random collection of Linux utilities,https://raw.githubusercontent.com/karelzak/util-linux/master/README,http://ftp.kernel.org/pub/linux/utils/util-linux-ng/,81,405,120553,C,bsd gpl3_or_later lgpl21_or_later Public_Domain,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",99482,,app-data,0,0,0,4,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
   x11-xkb-utils,,7.7~1,X11 XKB utilities,,0,https://security-tracker.debian.org/tracker/source-package/x11-xkb-utils,https://www.openhub.net/projects/x,X.Org,"X.Org provides an open source implementation of the network-transparent X Window System, as well as working on the standard itself.
   
  -The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",85363,c,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -xfonts-utils,,1:7.7~1,X Window System font utility programs,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-utils,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,97937,,program,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -cryptsetup,,2:1.4.3-4,disk encryption support - startup scripts,http://code.google.com/p/cryptsetup/,0,https://security-tracker.debian.org/tracker/source-package/cryptsetup,https://www.openhub.net/projects/cryptsetup,cryptsetup/LUKS,"Cryptsetup is utility used to conveniently setup disk encryption based on dm-crypt kernel module.
  -
  -These include plain dm-crypt volumes, LUKS volumes, loop-AES and TrueCrypt (including VeraCrypt extension) format.
  -
  -Project also includes veritysetup utility used to conveniently setup dm-verity block integrity checking kernel module.",https://gitlab.com/cryptsetup/cryptsetup/wikis/home,https://www.kernel.org/pub/linux/utils/cryptsetup/,7,16,19270,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",10203,c,program,0,0,1,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 1 , Data only: 0","This is used to set up disk encryption (at rest), e.g., Linux Unified Key Setup (LUKS).  Home page http://code.google.com/p/cryptsetup , uses git. Tracker in active use.  Latest version 1.6.6 released 2014-08-16.  Development ongoing; 8 commits in February 2015. ++"
  -mercurial,,2.2.2-3,"easy-to-use, scalable distributed version control system",http://mercurial.selenic.com/,3,https://security-tracker.debian.org/tracker/source-package/mercurial,https://www.openhub.net/projects/mercurial,Mercurial,"Mercurial is a fast, lightweight Source Control Management system designed for efficient handling of very large distributed projects.",http://mercurial.selenic.com/,http://mercurial.selenic.com/wiki/Download,73,588,260298,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,"Very large, active development team",11587,python,program,0,1,0,3,"Website points: 0, CVE: 2, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 1 , Data only: 0",
  -base-files,,7.1wheezy7,Debian base system miscellaneous files,,1,https://security-tracker.debian.org/tracker/source-package/base-files,,,,,,,,,,,,,,,153945,,app-data,0,0,0,2,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -ca-certificates,,20130119+deb7u1,Common CA certificates,,0,https://security-tracker.debian.org/tracker/source-package/ca-certificates,,,,,,,,,,,,,,,148597,,app-data,0,1,0,2,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 1 , Data only: -3",
  -console-setup,,1.88,console font and keymap setup program,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,136537,shell,program,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -console-setup-linux,console-setup,1.88,Linux specific part of console-setup,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,120225,,,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -debconf,,1.5.49,Debian configuration management system,,0,https://security-tracker.debian.org/tracker/source-package/debconf,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,153955,perl,program,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -dkms,,2.2.0.3-1.2,Dynamic Kernel Module Support Framework,http://linux.dell.com/dkms,0,https://security-tracker.debian.org/tracker/source-package/dkms,https://www.openhub.net/projects/dkms-framework,DKMS (Dynamic Kernel Module Support),DKMS stands for Dynamic Kernel Module Support. It is designed to create a framework where kernel dependent module source can reside so that it is very easy to rebuild modules as you upgrade kernels. This will allow Linux vendors to provide driver drops without having to wait for new kernel releases while also taking out the guesswork for customers attempting to recompile modules for new kernels.,http://linux.dell.com/dkms/,http://linux.dell.com/dkms/,8,24,4225,shell script,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",34598,shell,program,0,0,1,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 1 , Data only: 0",
  -geoip-database,,20130213-1,IP lookup command line tools that use the GeoIP library (country database),http://www.maxmind.com/,0,https://security-tracker.debian.org/tracker/source-package/geoip-database,https://www.openhub.net/projects/geoipdb,GeoIP DB,The GeoIP Database project facilitates dynamic geolocation for web-based applications.,http://sourceforge.net/projects/geoipdb,,,,,,,,,,,134555,,app-data,1,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 2 , Data only: -3",
  -initramfs-tools,,0.109.1,generic modular initramfs generator,,0,https://security-tracker.debian.org/tracker/source-package/initramfs-tools,https://www.openhub.net/projects/initramfs-tools,initramfs-tools,"initramfs-tools generates an initramfs for 2.6 kernel. The mounting of the real root file system occurs in early user space. klibc provides utilities to setup root. Having the root on MD, LVM2,  LUKS or NFS is also supported.",,http://packages.debian.org/unstable/utils/initramfs-tools,6,78,1936,shell script,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,152394,shell,program,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +The development work is being done as part of the freedesktop.org community, sponsored by the X.Org Foundation.",http://www.x.org,http://www.x.org/wiki/Releases/Download,163,1196,3316063,C,BSD-3-Clause mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",101539,c,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: 0",
  +xfonts-utils,,1:7.7~1,X Window System font utility programs,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-utils,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,114795,,program,0,0,0,4,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +apache2-doc,apache2,2.2.22-13+deb7u3,Apache HTTP Server documentation,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",27029,,documentation,0,0,0,3,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +base-files,,7.1wheezy7,Debian base system miscellaneous files,,1,https://security-tracker.debian.org/tracker/source-package/base-files,,,,,,,,,,,,,,,175835,,app-data,0,0,0,3,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +ca-certificates,,20130119+deb7u1,Common CA certificates,,0,https://security-tracker.debian.org/tracker/source-package/ca-certificates,,,,,,,,,,,,,,,170056,,app-data,0,1,0,3,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 1 , Data only: -3",
  +console-setup,,1.88,console font and keymap setup program,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,157570,shell,program,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +console-setup-linux,console-setup,1.88,Linux specific part of console-setup,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,140004,,,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +debconf,,1.5.49,Debian configuration management system,,0,https://security-tracker.debian.org/tracker/source-package/debconf,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,175849,perl,program,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +geoip-database,,20130213-1,IP lookup command line tools that use the GeoIP library (country database),http://www.maxmind.com/,0,https://security-tracker.debian.org/tracker/source-package/geoip-database,https://www.openhub.net/projects/geoipdb,GeoIP DB,The GeoIP Database project facilitates dynamic geolocation for web-based applications.,http://sourceforge.net/projects/geoipdb,,,,,,,,,,,155032,,app-data,1,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 2 , Data only: -3",
  +initramfs-tools,,0.109.1,generic modular initramfs generator,,0,https://security-tracker.debian.org/tracker/source-package/initramfs-tools,https://www.openhub.net/projects/initramfs-tools,initramfs-tools,"initramfs-tools generates an initramfs for 2.6 kernel. The mounting of the real root file system occurs in early user space. klibc provides utilities to setup root. Having the root on MD, LVM2,  LUKS or NFS is also supported.",,http://packages.debian.org/unstable/utils/initramfs-tools,6,78,1936,shell script,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,174168,shell,program,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
   iso-codes,,3.41-1,"ISO language, territory, currency, script codes and their translations",http://pkg-isocodes.alioth.debian.org/,0,https://security-tracker.debian.org/tracker/source-package/iso-codes,https://www.openhub.net/projects/iso-codes,iso-codes,"This package provides the ISO-639 Language code list, the ISO-4217 currency list, the ISO-3166 Territory code list, and ISO-3166-2 sub-territory lists.
  -It also (more importantly) provides their translations in .po form.",http://pkg-isocodes.alioth.debian.org/,http://pkg-isocodes.alioth.debian.org/,3,67,121687,shell script,lgpl,,,,,136130,,data,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -keyboard-configuration,console-setup,1.88,system-wide keyboard preferences,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,139284,shell,program,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +It also (more importantly) provides their translations in .po form.",http://pkg-isocodes.alioth.debian.org/,http://pkg-isocodes.alioth.debian.org/,3,67,121687,shell script,lgpl,,,,,156785,,data,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +keyboard-configuration,console-setup,1.88,system-wide keyboard preferences,,0,https://security-tracker.debian.org/tracker/source-package/console-setup,https://www.openhub.net/projects/console-setup,console-setup,"console-setup provides the Linux console with the same versatile keyboard configuration that the X Window System uses. As a result there is no need to duplicate or change the keyboard files just to make simple customisations such as the use of dead keys, the key functioning as AltGr or Compose key, the key(s) to switch between Latin and non-Latin mode, etc.",,,5,26,27283,Perl,gpl Public_domain_,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,160499,shell,program,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libdrm-nouveau1a,libdrm,2.4.40-1~deb7u2,Userspace interface to nouveau-specific kernel DRM services -- runtime,,0,https://security-tracker.debian.org/tracker/source-package/libdrm,https://www.openhub.net/projects/libdrm,libdrm,libdrm provides core library routines for the X Window System to directly interface with video hardware using the Linux kernel's Direct Rendering Manager (DRM).,http://www.mesa3d.org/,http://cgit.freedesktop.org/mesa/drm/,50,206,37930,C,mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",48129,,shared-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
   linux-headers-amd64,linux-latest (46),3.2+46,Header files for Linux amd64 configuration (meta-package),,0,https://security-tracker.debian.org/tracker/source-package/linux-latest,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
   
  -!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",27210,,devel-lib,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  +!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",31213,,devel-lib,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
   linux-kbuild-3.2,linux-tools,3.2.17-1,Kbuild infrastructure for Linux 3.2,,0,https://security-tracker.debian.org/tracker/source-package/linux-tools,https://www.openhub.net/projects/linux,Linux Kernel,"Linux is a free software kernel, which combined with the GNU libraries, core utils and shell form the GNU/Linux operating system.
   
  -!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",25491,shell,,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: 0",
  -mime-support,,3.52-1,"MIME files 'mime.types' & 'mailcap', and support programs",,1,https://security-tracker.debian.org/tracker/source-package/mime-support,,,,,,,,,,,,,,,152722,perl,app-data,0,0,0,2,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",Processes potentially untrustworthy files.
  -os-prober,,1.58,utility to detect other OSes on a set of drives,,0,https://security-tracker.debian.org/tracker/source-package/os-prober,https://www.openhub.net/projects/os-prober,os-prober,,,,4,19,1740,shell script,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,138100,shell,program,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -python-debian,,0.1.21,Python modules to work with Debian-related data formats,,0,https://security-tracker.debian.org/tracker/source-package/python-debian,https://www.openhub.net/projects/python-debian,python-debian,,,,5,14,5752,Python,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,123468,python,devel-lib,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -readline-common,readline6,6.2+dfsg-0.1,"GNU readline and history libraries, common files",,1,https://security-tracker.debian.org/tracker/source-package/readline6,,,,,,,,,,,,,,,153919,,app-data,0,0,0,2,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -apache2-doc,apache2,2.2.22-13+deb7u3,Apache HTTP Server documentation,http://httpd.apache.org/,47,https://security-tracker.debian.org/tracker/source-package/apache2,https://www.openhub.net/projects/apache,Apache HTTP Server,"The Apache HTTP Server Project is a collaborative software development effort aimed at creating a robust, commercial-grade, feature-rich, and freely-available source code implementation of an HTTP (Web) server. The project is jointly managed by a group of volunteers located around the world, using the Internet and the Web to communicate, plan, and develop the server and its related documentation. This project is part of the Apache Software Foundation. In addition, hundreds of users have contributed ideas, code, and documentation to the project.",http://httpd.apache.org/,http://httpd.apache.org/download.cgi,30,117,1760653,C,apache_2,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Very large, active development team",23841,,documentation,0,0,0,2,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 0, Language: 2, Exposure: 0 , Data only: -3",
  +!!!PLEASE!!! DO NOT REMOVE git://git.kernel.org/pub/scm/linux/kernel/git/tglx/history.git enlistment. It contains historical pre-2.6.12 commit data.",http://kernel.org/,,3714,14514,18036029,C,GNU_General_Public_License_v2_0_only,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",28400,shell,,0,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +mime-support,,3.52-1,"MIME files 'mime.types' & 'mailcap', and support programs",,1,https://security-tracker.debian.org/tracker/source-package/mime-support,,,,,,,,,,,,,,,174381,perl,app-data,0,0,0,3,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",Processes potentially untrustworthy files.
  +os-prober,,1.58,utility to detect other OSes on a set of drives,,0,https://security-tracker.debian.org/tracker/source-package/os-prober,https://www.openhub.net/projects/os-prober,os-prober,,,,4,19,1740,shell script,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,Average size development team,159013,shell,program,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +python-debian,,0.1.21,Python modules to work with Debian-related data formats,,0,https://security-tracker.debian.org/tracker/source-package/python-debian,https://www.openhub.net/projects/python-debian,python-debian,,,,5,14,5752,Python,,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Average size development team,143132,python,devel-lib,0,0,0,3,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +readline-common,readline6,6.2+dfsg-0.1,"GNU readline and history libraries, common files",,1,https://security-tracker.debian.org/tracker/source-package/readline6,,,,,,,,,,,,,,,175811,,app-data,0,0,0,3,"Website points: 1, CVE: 1, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
   virt-manager,,0.9.1-4,desktop application for managing virtual machines,http://virt-manager.et.redhat.com/,0,https://security-tracker.debian.org/tracker/source-package/virt-manager,https://www.openhub.net/projects/virt-manager,virt-manager,"The ""Virtual Machine Manager"" application (virt-manager for short package name) is a desktop user interface for managing virtual machines. It presents a summary view of running domains and their live performance & resource utilization statistics. A detailed view presents graphs showing performance & utilization over time. Ultimately it will allow creation of new domains, and configuration & adjustment of a domain's resource allocation & virtual hardware. Finally an embedded VNC client viewer presents a full graphical console to the guest domain.
   
  -The virt-install, virt-clone, and virt-xml command line tools are also developed as part of virt-manager",http://virt-manager.org,http://virt-manager.org/download.html,25,130,78458,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",4638,python,program,1,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 2 , Data only: 0",
  -bash-completion,,1:2.0-1,programmable completion for the bash shell,http://bash-completion.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/bash-completion,https://www.openhub.net/projects/bash-completion,bash-completion,"bash_completion extends bashs standard completion behavior to achieve complex command lines with just a few keystrokes.  This project was conceived to produce programmable completion routines for the most common Linux/UNIX commands, reducing the amount of typing sysadmins and programmers need to do on a daily basis.",http://bash-completion.alioth.debian.org,,8,68,9954,shell script,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",137998,shell,plugin,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -debian-archive-keyring,,2014.1~deb7u1,GnuPG archive keys of the Debian archive,,0,https://security-tracker.debian.org/tracker/source-package/debian-archive-keyring,,,,,,,,,,,,,,,153794,,data,0,0,0,1,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -discover-data,,2.2010.10.18,Data lists for Discover hardware detection system,,0,https://security-tracker.debian.org/tracker/source-package/discover-data,,,,,,,,,,,,,,,135794,,app-data,0,0,0,1,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -gcc-4.6-base,gcc-4.6,4.6.3-14,"GCC, the GNU Compiler Collection (base package)",http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",33513,,app-data,0,0,0,1,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  -grub-common,grub2,1.99-27+deb7u2,GRand Unified Bootloader (common files),http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",148747,shell,app-data,0,0,0,1,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +The virt-install, virt-clone, and virt-xml command line tools are also developed as part of virt-manager",http://virt-manager.org,http://virt-manager.org/download.html,25,130,78458,Python,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,"Large, active development team",5132,python,program,1,0,0,3,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 2 , Data only: 0",
  +bash-completion,,1:2.0-1,programmable completion for the bash shell,http://bash-completion.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/bash-completion,https://www.openhub.net/projects/bash-completion,bash-completion,"bash_completion extends bashs standard completion behavior to achieve complex command lines with just a few keystrokes.  This project was conceived to produce programmable completion routines for the most common Linux/UNIX commands, reducing the amount of typing sysadmins and programmers need to do on a daily basis.",http://bash-completion.alioth.debian.org,,8,68,9954,shell script,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,"Large, active development team",158597,shell,plugin,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +debian-archive-keyring,,2014.1~deb7u1,GnuPG archive keys of the Debian archive,,0,https://security-tracker.debian.org/tracker/source-package/debian-archive-keyring,,,,,,,,,,,,,,,175667,,data,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +discover-data,,2.2010.10.18,Data lists for Discover hardware detection system,,0,https://security-tracker.debian.org/tracker/source-package/discover-data,,,,,,,,,,,,,,,156711,,app-data,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +dkms,,2.2.0.3-1.2,Dynamic Kernel Module Support Framework,http://linux.dell.com/dkms,0,https://security-tracker.debian.org/tracker/source-package/dkms,https://www.openhub.net/projects/dkms-framework,DKMS (Dynamic Kernel Module Support),DKMS stands for Dynamic Kernel Module Support. It is designed to create a framework where kernel dependent module source can reside so that it is very easy to rebuild modules as you upgrade kernels. This will allow Linux vendors to provide driver drops without having to wait for new kernel releases while also taking out the guesswork for customers attempting to recompile modules for new kernels.,http://linux.dell.com/dkms/,http://linux.dell.com/dkms/,8,24,4225,shell script,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",39722,shell,program,0,0,1,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 1 , Data only: 0",
  +grub-common,grub2,1.99-27+deb7u2,GRand Unified Bootloader (common files),http://www.gnu.org/software/grub/,1,https://security-tracker.debian.org/tracker/source-package/grub2,https://www.openhub.net/projects/grub,GNU GRUB,GRUB is the GRand Unified Bootloader.,http://savannah.gnu.org/projects/grub/,,30,185,313200,C,gpl3_or_later,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",170292,shell,app-data,0,0,0,2,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
   install-info,texinfo,4.13a.dfsg.1-10,Manage installed documentation in info format,,0,https://security-tracker.debian.org/tracker/source-package/texinfo,https://www.openhub.net/projects/texinfo,Texinfo,"Texinfo is the official documentation format of the GNU project. It was invented by Richard Stallman and Bob Chassell many years ago, loosely based on Brian Reid's Scribe and other formatting languages of the time. It is used by many non-GNU projects as well.
   
  -Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,144643,shell,program,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -libdiscover2,discover,2.1.2-5.2,hardware identification library,,0,https://security-tracker.debian.org/tracker/source-package/discover,,,,,,,,,,,,,,,135740,,app-data,0,0,0,1,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -python,python-defaults,2.7.3-4+deb7u1,interactive high-level object-oriented language (default version),http://www.python.org/,0,https://security-tracker.debian.org/tracker/source-package/python-defaults,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",151897,python,program,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -sgml-base,,1.26+nmu4,SGML infrastructure and SGML catalog file support,,0,https://security-tracker.debian.org/tracker/source-package/sgml-base,,,,,,,,,,,,,,,142130,perl,app-data,0,0,0,1,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,165628,shell,program,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +libdiscover2,discover,2.1.2-5.2,hardware identification library,,0,https://security-tracker.debian.org/tracker/source-package/discover,,,,,,,,,,,,,,,156656,,app-data,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +python,python-defaults,2.7.3-4+deb7u1,interactive high-level object-oriented language (default version),http://www.python.org/,0,https://security-tracker.debian.org/tracker/source-package/python-defaults,https://www.openhub.net/projects/python,Python programming language,"Python is a dynamic, object-oriented programming language that can be used for many kinds of software development. It offers strong support for integration with other languages and tools, comes with extensive standard libraries, and can be learned in a few days. Many Python programmers report substantial productivity gains and feel the language encourages the development of better code.",https://www.python.org,https://www.python.org/downloads/,53,207,998525,Python,python_software_foundation,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",173534,python,program,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +sgml-base,,1.26+nmu4,SGML infrastructure and SGML catalog file support,,0,https://security-tracker.debian.org/tracker/source-package/sgml-base,,,,,,,,,,,,,,,163330,perl,app-data,0,0,0,2,"Website points: 1, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
   task-english,tasksel,3.14.1,General English environment,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
   
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",49407,,,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",57549,,,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
   tasksel,,3.14.1,Tool for selecting tasks for installation on Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
   
  -tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",148863,,program,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",170451,,program,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
   texinfo,,4.13a.dfsg.1-10,Documentation system for on-line information and printed output,,0,https://security-tracker.debian.org/tracker/source-package/texinfo,https://www.openhub.net/projects/texinfo,Texinfo,"Texinfo is the official documentation format of the GNU project. It was invented by Richard Stallman and Bob Chassell many years ago, loosely based on Brian Reid's Scribe and other formatting languages of the time. It is used by many non-GNU projects as well.
   
  -Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,132789,,program,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -debconf-i18n,debconf,1.5.49,full internationalization support for debconf,,0,https://security-tracker.debian.org/tracker/source-package/debconf,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,152910,,app-data,0,0,0,0,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -debian-faq,,5.0.1,Debian FAQ,http://www.debian.org/doc/user-manuals#faq,0,https://security-tracker.debian.org/tracker/source-package/debian-faq,,,,,,,,,,,,,,,127084,,documentation,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -iamerican,ispell,3.3.02-6,American English dictionary for ispell (standard version),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,63647,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -ibritish,ispell,3.3.02-6,British English dictionary for ispell (standard version),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,64248,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -ienglish-common,ispell,3.3.02-6,Common files for British and American ispell dictionaries,http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,57057,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -manpages,,3.44-1,Manual pages about using a GNU/Linux system,http://www.kernel.org/doc/man-pages/,0,https://security-tracker.debian.org/tracker/source-package/manpages,,,,,,,,,,,,,,,153650,,documentation,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  -manpages-dev,manpages,3.44-1,Manual pages about using GNU/Linux for development,http://www.kernel.org/doc/man-pages/,0,https://security-tracker.debian.org/tracker/source-package/manpages,,,,,,,,,,,,,,,91799,,documentation,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  +Texinfo uses a single source file to produce output in a number of formats, both online and printed (dvi, html, info, pdf, xml, etc.). This means that instead of writing different documents for online information and another for a printed manual, you need write only one document. And when the work is revised, you need revise only that one document. The Texinfo system is well-integrated with GNU Emacs.",http://www.gnu.org/software/texinfo/,http://ftp.gnu.org/gnu/texinfo/,5,20,1549927,Perl,gpl3,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,152872,,program,0,0,0,2,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: 0",
  +debian-faq,,5.0.1,Debian FAQ,http://www.debian.org/doc/user-manuals#faq,0,https://security-tracker.debian.org/tracker/source-package/debian-faq,,,,,,,,,,,,,,,146829,,documentation,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +gcc-4.6-base,gcc-4.6,4.6.3-14,"GCC, the GNU Compiler Collection (base package)",http://gcc.gnu.org/,1,https://security-tracker.debian.org/tracker/source-package/gcc-4.6,https://www.openhub.net/projects/gcc,GNU Compiler Collection,"The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Java, and Ada, as well as libraries for these languages (libstdc++, libgcj,...).",http://gcc.gnu.org/,http://gcc.gnu.org/install/binaries.html,197,550,7204260,C,gpl3_or_later,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",37200,,app-data,0,0,0,1,"Website points: 0, CVE: 1, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  +iamerican,ispell,3.3.02-6,American English dictionary for ispell (standard version),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,72475,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +ibritish,ispell,3.3.02-6,British English dictionary for ispell (standard version),http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,73183,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +ienglish-common,ispell,3.3.02-6,Common files for British and American ispell dictionaries,http://www.lasr.cs.ucla.edu/geoff/ispell.html,0,https://security-tracker.debian.org/tracker/source-package/ispell,,,,,,,,,,,,,,,65652,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +manpages,,3.44-1,Manual pages about using a GNU/Linux system,http://www.kernel.org/doc/man-pages/,0,https://security-tracker.debian.org/tracker/source-package/manpages,,,,,,,,,,,,,,,175515,,documentation,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  +manpages-dev,manpages,3.44-1,Manual pages about using GNU/Linux for development,http://www.kernel.org/doc/man-pages/,0,https://security-tracker.debian.org/tracker/source-package/manpages,,,,,,,,,,,,,,,103768,,documentation,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
   openssh-blacklist,,0.4.1+nmu1,list of default blacklisted OpenSSH RSA and DSA keys,,0,https://security-tracker.debian.org/tracker/source-package/openssh-blacklist,https://www.openhub.net/projects/openssh,OpenSSH,"OpenSSH is a free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer.
   
   The following is a list of OpenSSH features:
  
positive.code: 
  One of the main sources used by SCOWL is Alan Beale 12Dicts package.
  
  One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,5,6,8111,Perl,BSD-3-Clause mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,140676,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,84845,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,98024,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xkb-data,xkeyboard-config,2.5.1-3,X Keyboard Extension (XKB) configuration data,http://www.freedesktop.org/Software/XKeyboardConfig,0,https://security-tracker.debian.org/tracker/source-package/xkeyboard-config,https://www.openhub.net/projects/xkeyboard-config,xkeyboard-config,"The non-arch keyboard configuration database for X Window. The goal is to provide the consistent, well-structured, frequently released open source of X keyboard configuration data for X Window System implementations (free, open source and commercial). The project is targeted to XKB-based systems.",http://freedesktop.org/wiki/Software/XKeyboardConfig,http://freedesktop.org/wiki/Software/XKeyboardConfig#line-26,14,94,9579,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",141833,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  task-web-server,tasksel,3.14.1,Web server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",13505,,program,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 0 , Data only: 0",
  
negative.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",100461,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
  task-web-server,tasksel,3.14.1,Web server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",16041,,program,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  tzdata,,2014h-0wheezy1,time zone and daylight-saving time data,http://www.iana.org/time-zones,0,https://security-tracker.debian.org/tracker/source-package/tzdata,,,,,,,,,,,,,,,175762,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,101023,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,114888,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  xkb-data,xkeyboard-config,2.5.1-3,X Keyboard Extension (XKB) configuration data,http://www.freedesktop.org/Software/XKeyboardConfig,0,https://security-tracker.debian.org/tracker/source-package/xkeyboard-config,https://www.openhub.net/projects/xkeyboard-config,xkeyboard-config,"The non-arch keyboard configuration database for X Window. The goal is to provide the consistent, well-structured, frequently released open source of X keyboard configuration data for X Window System implementations (free, open source and commercial). The project is targeted to XKB-based systems.",http://freedesktop.org/wiki/Software/XKeyboardConfig,http://freedesktop.org/wiki/Software/XKeyboardConfig#line-26,14,94,9579,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",163230,,app-data,0,0,0,1,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 2, Exposure: 0 , Data only: -3",
  debconf-i18n,debconf,1.5.49,full internationalization support for debconf,,0,https://security-tracker.debian.org/tracker/source-package/debconf,https://www.openhub.net/projects/debconf,debconf,,,,5,23,9385,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Average size development team,174733,,app-data,0,0,0,0,"Website points: 1, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  tasksel-data,tasksel,3.14.1,Official tasks used for installation of Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",170388,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 2, Language: 0, Exposure: 0 , Data only: -3",
  wamerican,scowl,7.1-1,American English dictionary words for /usr/share/dict,http://wordlist.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/scowl,https://www.openhub.net/projects/scowl,SCOWL (and friends),"SCOWL (Spell Checker Oriented Word Lists) is a database of English words that can be used to create word lists suitable for use in spell checkers of various sizes and dialects (America, British (both -ise and -ize) and Canadian). However, I am sure it will have numerous other uses as well.
  
  The main product of SCOWL are spell checker dictionaries for Hunspell and Aspell.
  