anchor.diff:   paste pathchk pinky pr printenv printf ptx pwd readlink rm rmdir runcon
    sha*sum seq shred sleep sort split stat stty sum sync tac tail tee test
    timeout touch tr true truncate tsort tty uname unexpand uniq unlink
  - users vdir wc who whoami yes",http://savannah.gnu.org/projects/coreutils/,,37,182,86268,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",169897,C,,0,0,1,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Vital software for a running system.  Active maintenance.  Includes many subcomponents; some components might need review, but hard to tell because they're managed as a group."
  -diffutils,,1:3.2-6,File comparison utilities,http://www.gnu.org/software/diffutils/,0,https://security-tracker.debian.org/tracker/source-package/diffutils,https://www.openhub.net/projects/diffutils,GNU Diff Utilities,"The GNU diffutils are comprised of diff, diff3, sdiff, and cmp, utilities for showing differences between files. The manual also documents patch, which uses diff output to update files.",http://savannah.gnu.org/projects/diffutils,http://ftp.gnu.org/gnu/diffutils/,3,17,9727,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,161444,C,,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -dmidecode,,2.11-9,SMBIOS/DMI table decoder,http://dmidecode.nongnu.org/,0,https://security-tracker.debian.org/tracker/source-package/dmidecode,https://www.openhub.net/projects/dmidecode,dmidecode,"Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of varying level of interest and reliability depending on the manufacturer. This will often include usage status for the CPU sockets, expansion slots (e.g. AGP, PCI, ISA) and memory module slots, and the list of I/O ports (e.g. serial, parallel, USB).",http://www.nongnu.org/dmidecode/,http://download.savannah.gnu.org/releases/dmidecode/,1,4,5697,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,167006,,,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -doc-debian,,6.1,Debian Project documentation and other documents,,0,https://security-tracker.debian.org/tracker/source-package/doc-debian,https://www.openhub.net/projects/doc-debian,doc-debian,,,,0,15,585,Perl,,Stable Y-O-Y development activity,"Mature, well-established codebase",Few source code comments,No recent development activity,146474,,,0,0,0,7,"Website points: 1, CVE: 0, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  -gnupg,,1.4.12-7+deb7u6,GNU privacy guard - a free PGP replacement,http://www.gnupg.org,11,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,16,33,200829,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",169880,,,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Vital for protecting email (CII has already invested with a one-time investment) ++
  -gpgv,gnupg,1.4.12-7+deb7u6,GNU privacy guard - signature verification tool,http://www.gnupg.org,11,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,16,33,200829,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",169785,,,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Vital for protecting email (CII has already invested with a one-time investment) ++
  -krb5-locales,krb5,1.10.1+dfsg-5+deb7u2,Internationalization support for MIT Kerberos,http://web.mit.edu/kerberos/,45,https://security-tracker.debian.org/tracker/source-package/krb5,https://www.openhub.net/projects/kerberos,Kerberos,Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.,http://web.mit.edu/Kerberos/,http://web.mit.edu/Kerberos/dist/index.html,21,96,388789,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",126554,,,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Important for Kerberos.
  + users vdir wc who whoami yes",http://savannah.gnu.org/projects/coreutils/,,37,182,86268,C,gpl,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",153958,c,program,0,0,1,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Vital software for a running system.  Active maintenance.  Includes many subcomponents; some components might need review, but hard to tell because they're managed as a group."
  +diffutils,,1:3.2-6,File comparison utilities,http://www.gnu.org/software/diffutils/,0,https://security-tracker.debian.org/tracker/source-package/diffutils,https://www.openhub.net/projects/diffutils,GNU Diff Utilities,"The GNU diffutils are comprised of diff, diff3, sdiff, and cmp, utilities for showing differences between files. The manual also documents patch, which uses diff output to update files.",http://savannah.gnu.org/projects/diffutils,http://ftp.gnu.org/gnu/diffutils/,3,17,9727,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Small development team,147094,c,program,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +dmidecode,,2.11-9,SMBIOS/DMI table decoder,http://dmidecode.nongnu.org/,0,https://security-tracker.debian.org/tracker/source-package/dmidecode,https://www.openhub.net/projects/dmidecode,dmidecode,"Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard. This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of varying level of interest and reliability depending on the manufacturer. This will often include usage status for the CPU sockets, expansion slots (e.g. AGP, PCI, ISA) and memory module slots, and the list of I/O ports (e.g. serial, parallel, USB).",http://www.nongnu.org/dmidecode/,http://download.savannah.gnu.org/releases/dmidecode/,1,4,5697,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,151517,,program,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +gnupg,,1.4.12-7+deb7u6,GNU privacy guard - a free PGP replacement,http://www.gnupg.org,11,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,16,33,200829,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153946,c,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Vital for protecting email (CII has already invested with a one-time investment) ++
  +gpgv,gnupg,1.4.12-7+deb7u6,GNU privacy guard - signature verification tool,http://www.gnupg.org,11,https://security-tracker.debian.org/tracker/source-package/gnupg,https://www.openhub.net/projects/gnupg,GnuPG,"GnuPG is the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC2440 . GnuPG allows to encrypt and sign your data and communication, features a versatile key managment system as well as access modules for all kind of public key directories.",http://www.gnupg.org/,http://www.gnupg.org/download/index.html,16,33,200829,C,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",153867,c,program,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Vital for protecting email (CII has already invested with a one-time investment) ++
  +krb5-locales,krb5,1.10.1+dfsg-5+deb7u2,Internationalization support for MIT Kerberos,http://web.mit.edu/kerberos/,45,https://security-tracker.debian.org/tracker/source-package/krb5,https://www.openhub.net/projects/kerberos,Kerberos,Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography.,http://web.mit.edu/Kerberos/,http://web.mit.edu/Kerberos/dist/index.html,21,96,388789,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",118715,,,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0",Important for Kerberos.
   libapt-inst1.5,apt,0.9.7.9+deb7u6,deb package format runtime library,,15,https://security-tracker.debian.org/tracker/source-package/apt,https://www.openhub.net/projects/apt,apt - Advanced Package Tool,"Debian's next generation front-end for the dpkg package manager. It provides the apt-get utility and APT dselect method that provides a simpler, safer way to install and upgrade packages.
   
   APT features complete installation ordering, multiple source capability
  -and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,30,120,71636,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",134727,,Shared Library,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  +and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,30,120,71636,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",126925,,shared-lib,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
   libapt-pkg4.12,apt,0.9.7.9+deb7u6,package managment runtime library,,15,https://security-tracker.debian.org/tracker/source-package/apt,https://www.openhub.net/projects/apt,apt - Advanced Package Tool,"Debian's next generation front-end for the dpkg package manager. It provides the apt-get utility and APT dselect method that provides a simpler, safer way to install and upgrade packages.
   
   APT features complete installation ordering, multiple source capability
  -and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,30,120,71636,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",135135,,Shared Library,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  -libbsd0,libbsd,0.4.2-1,utility functions from BSD systems - shared library,http://libbsd.freedesktop.org/,0,https://security-tracker.debian.org/tracker/source-package/libbsd,https://www.openhub.net/projects/libbsd,libbsd,Utility functions from BSD systems,http://libbsd.freedesktop.org/,http://libbsd.freedesktop.org/releases/,1,16,7011,C,Beerware bsd Internet_Systems_Consortium_License,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,161473,C,Shared Library,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  -libcwidget3,cwidget,0.5.16-3.4,high-level terminal interface library for C++ (runtime files),http://cwidget.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/cwidget,https://www.openhub.net/projects/cwidget,cwidget,"cwidget is a C++-based user interface framework for terminal programs built on curses. Its design is based on that of modern user-interface libraries such as GTK+ and Qt, with pervasive late-binding through the signal/slot pattern.",http://cwidget.alioth.debian.org/,,1,4,19114,C++,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,166900,C++,Shared Library,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +and several other unique features.",https://wiki.debian.org/Apt,http://packages.qa.debian.org/a/apt.html,30,120,71636,C++,gpl,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Very large, active development team",127084,,shared-lib,0,1,0,7,"Website points: 0, CVE: 3, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 1 , Data only: 0","Should primarily be managing data from trusted source; if it ensures data source okay, less risky."
  +libbsd0,libbsd,0.4.2-1,utility functions from BSD systems - shared library,http://libbsd.freedesktop.org/,0,https://security-tracker.debian.org/tracker/source-package/libbsd,https://www.openhub.net/projects/libbsd,libbsd,Utility functions from BSD systems,http://libbsd.freedesktop.org/,http://libbsd.freedesktop.org/releases/,1,16,7011,C,Beerware bsd Internet_Systems_Consortium_License,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Well-commented source code,Only a single active developer,147119,c,shared-lib,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
  +libcwidget3,cwidget,0.5.16-3.4,high-level terminal interface library for C++ (runtime files),http://cwidget.alioth.debian.org,0,https://security-tracker.debian.org/tracker/source-package/cwidget,https://www.openhub.net/projects/cwidget,cwidget,"cwidget is a C++-based user interface framework for terminal programs built on curses. Its design is based on that of modern user-interface libraries such as GTK+ and Qt, with pervasive late-binding through the signal/slot pattern.",http://cwidget.alioth.debian.org/,,1,4,19114,C++,,Stable Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,Only a single active developer,149985,c++,shared-lib,0,0,0,7,"Website points: 0, CVE: 0, 12-month contributor: 4, Popularity: 1, Language: 2, Exposure: 0 , Data only: 0",
   libevent-2.0-5,libevent,2.0.19-stable-3,Asynchronous event notification library,http://libevent.org/,1,https://security-tracker.debian.org/tracker/source-package/libevent,https://www.openhub.net/projects/libevent,"Socket, Signal, and Timer Event Library","A library implementing an event-based interface to sockets, signals, and timers.
   
  -Note that this is a separate project to libevent - http://www.ohloh.net/p/levent.",http://sourceforge.net/projects/libevent,,0,6,143161,shell script,BSD-3-Clause,Stable Y-O-Y development activity,Well-established codebase,Average number of code comments,No recent development activity,125524,,,0,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
  +Note that this is a separate project to libevent - http://www.ohloh.net/p/levent.",http://sourceforge.net/projects/libevent,,0,6,143161,shell script,BSD-3-Clause,Stable Y-O-Y development activity,Well-established codebase,Average number of code comments,No recent development activity,116889,,shared-lib,0,0,0,7,"Website points: 0, CVE: 1, 12-month contributor: 5, Popularity: 1, Language: 0, Exposure: 0 , Data only: 0",
   libfreetype6,freetype,2.4.9-1.1,"FreeType 2 font engine, shared library files",http://www.freetype.org,65,https://security-tracker.debian.org/tracker/source-package/freetype,https://www.openhub.net/projects/freetype,The FreeType Project,"FreeType 2 is a software font engine that is designed to be small,
   efficient, highly customizable and portable while capable of
   producing high-quality output (glyph images). It can be used in
  
positive.code:     * Interoperability (Compliance with SSH 1.3, 1.5, and 2.0 protocol Standards)
      * SFTP client and server support in both SSH1 and SSH2 protocols.
      * Kerberos and AFS Ticket Passing
      * Data Compression",http://www.openssh.com/,http://www.openssh.com/portable.html,23,92,69047,C,BSD-3-Clause,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",132473,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  tasksel-data,tasksel,3.14.1,Official tasks used for installation of Debian systems,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",164602,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  tzdata,,2014h-0wheezy1,time zone and daylight-saving time data,http://www.iana.org/time-zones,0,https://security-tracker.debian.org/tracker/source-package/tzdata,,,,,,,,,,,,,,,169781,,Application Data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  wamerican,scowl,7.1-1,American English dictionary words for /usr/share/dict,http://wordlist.sourceforge.net/,0,https://security-tracker.debian.org/tracker/source-package/scowl,https://www.openhub.net/projects/scowl,SCOWL (and friends),"SCOWL (Spell Checker Oriented Word Lists) is a database of English words that can be used to create word lists suitable for use in spell checkers of various sizes and dialects (America, British (both -ise and -ize) and Canadian). However, I am sure it will have numerous other uses as well.
  
  The main product of SCOWL are spell checker dictionaries for Hunspell and Aspell.
  
negative.code: 
  One of the main sources used by SCOWL is Alan Beale 12Dicts package.
  
  One of the main artifacts created was the VarCon (Variant Conversion) database, that can be used to convert between American, British and Canadian dictionaries.",http://wordlist.aspell.net,,5,6,8111,Perl,BSD-3-Clause mit,Increasing Y-O-Y development activity,"Mature, well-established codebase",Very few source code comments,Average size development team,140676,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-base,,1:1.0.3,standard fonts for X,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-base,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,84845,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xfonts-encodings,,1:1.0.4-1,Encodings for X.Org fonts,,0,https://security-tracker.debian.org/tracker/source-package/xfonts-encodings,https://www.openhub.net/projects/xfonts,Linux Font Project,Developing console fonts and fixed- and variable-width fonts for X (and porting some of them to Windows). The purpose is to make new fonts to enrich the very poor selection of fonts available in both console and X and improve the existing ones.,http://sourceforge.net/projects/xfonts/,,,,,,,,,,,98024,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 2, Popularity: 1, Language: 0, Exposure: 0 , Data only: -3",
  xkb-data,xkeyboard-config,2.5.1-3,X Keyboard Extension (XKB) configuration data,http://www.freedesktop.org/Software/XKeyboardConfig,0,https://security-tracker.debian.org/tracker/source-package/xkeyboard-config,https://www.openhub.net/projects/xkeyboard-config,xkeyboard-config,"The non-arch keyboard configuration database for X Window. The goal is to provide the consistent, well-structured, frequently released open source of X keyboard configuration data for X Window System implementations (free, open source and commercial). The project is targeted to XKB-based systems.",http://freedesktop.org/wiki/Software/XKeyboardConfig,http://freedesktop.org/wiki/Software/XKeyboardConfig#line-26,14,94,9579,C,mit,Decreasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",141833,,app-data,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 1, Language: 2, Exposure: 0 , Data only: -3",
  task-web-server,tasksel,3.14.1,Web server,,0,https://security-tracker.debian.org/tracker/source-package/tasksel,https://www.openhub.net/projects/tasksel,tasksel,"Tool for selecting tasks for installation on Debian system.
  
  tasksel is a simple interface for users who want to pick general tasks for installation on their Debian GNU/Linux system. This program is used during the installation process, but users can also use tasksel at any point.",https://launchpad.net/tasksel,,9,134,2064,Perl,gpl,Increasing Y-O-Y development activity,"Mature, well-established codebase",Average number of code comments,"Large, active development team",13505,,program,0,0,0,0,"Website points: 0, CVE: 0, 12-month contributor: 0, Popularity: 0, Language: 0, Exposure: 0 , Data only: 0",
  