Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Add fork analysis for "Maintained" check or a new check #2352

Open
qequ opened this issue Oct 14, 2022 · 4 comments
Open

Feature: Add fork analysis for "Maintained" check or a new check #2352

qequ opened this issue Oct 14, 2022 · 4 comments
Labels

Comments

@qequ
Copy link
Contributor

qequ commented Oct 14, 2022

Is your feature request related to a problem? Please describe.
When checking how maintained a project is, usually if it's abandoned one tends to look if a fork has continued the abandoned project but it's cumbersome to check forks one by one

Describe the solution you'd like
if the "Maintained" check gives a low score, make scorecard check the forks and see if there are forks that have activity. At least more commits ahead of the default branch, or ,more thoroughly, run a "Maintained" check over the fork

Describe alternatives you've considered
Another alternative would be to add a new check specifically for fork analysis, would be useful also to check if there are forks that are diverging from the repo whether if it's maintained or not

Additional context
Add any other context or screenshots about the feature request here.

@qequ qequ added the kind/enhancement New feature or request label Oct 14, 2022
@raghavkaul
Copy link
Contributor

This is a great suggestion! Yes, there are definitely more things that we could and should add to determine the 'liveness' of a repository (combining signals like release recency, CI test runs, dependency updates (#2458), number of graph dependents, stars/watchers). All of these signals would help end-users find the authoritative fork of a library.

How many additional API calls would this require? API-heaviness is a major constraint for the scorecard cron infrastructure as well as overall performance. We should try to measure this.

Another pitfall is that such changes would put some amount of pressure on maintainers to game the liveness metric, which is tricky for projects that are stable, or that don't have many dependencies, or simply don't require frequent updates. This characteristic makes it hard to score such a check. But I do agree that we should try to surface this in Raw Results.

A separate idea entirely from determining whether a repository is the 'authoritative' fork is to determine whether it is a fork at all. On GitHub, it's possible to create and view forks through the Dependency Graph, or by searching commit SHAs shared between repos across GitHub. Other methods could analyze the content of a repo. But the same Qs are still open: how is this scored? And how many API calls does it cost scorecard?

@dgutson
Copy link

dgutson commented Nov 15, 2022

@github-actions
Copy link

Stale issue message - this issue will be closed in 7 days

Copy link

This issue is stale because it has been open for 60 days with no activity.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: No status
Development

No branches or pull requests

4 participants