Skip to content

Commit d9a6dba

Browse files
authored
Merge pull request #111 from geekygirldawn/starter_viab
Added links to the 4 other metrics models and fixed a couple of typos
2 parents c89586f + a072975 commit d9a6dba

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

metrics-model-libs/viability/starter/definition/viability-starter.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,9 @@
22

33
## Why It Matters
44

5-
Project Viability is an aggregate measurement of four categories: Compliance + Security, Governance, Community Engagement, and Strategy. Viability is relevant through the lens of any prospective user of a given project; specifically to provide an understanding of how viable a particular project may be for themselves.
5+
Project Viability is an aggregate measurement of four categories: [Compliance + Security](https://chaoss.community/?p=5407), [Governance](https://chaoss.community/?p=5411), [Community Engagement](https://chaoss.community/?p=5403), and [Strategy](https://chaoss.community/?p=5416). Viability is relevant through the lens of any prospective user of a given project; specifically to provide an understanding of how viable a particular project may be for themselves.
66

7-
The aggregate of four metrics, containing 24 distinct metrics in itself, may be more effort than can be reasonably expected on experiments to measure viability for interested products. Given that many successful projects start with experiments, we've created this starter model
7+
The aggregate of four metrics, containing 24 distinct metrics in itself, may be more effort than can be reasonably expected on experiments to measure viability for interested products. Given that many successful projects start with experiments, we've created this starter model.
88

99
## User Stories
1010

@@ -35,10 +35,10 @@ The aggregate of four metrics, containing 24 distinct metrics in itself, may be
3535
In a highly regulated industry, companies like Verizon have interest in ensuring that their dependencies are well understood and within their licensing boundaries for use across a diverse product range. Our OSPO was particularly interested in determining how “viable” a project is for different product lines that Verizon offers, from web applications to products that are shipped to a home and maintained from afar for years on end.
3636

3737
We took the larger, comprehensive model to capture Viability in a product, and distilled some of the most intuitive and important metrics to this starter model. It collects at least one metric from each pillar:
38-
* Community
39-
* Compliance/Security
40-
* Governance
41-
* Strategy
38+
* [Community](https://chaoss.community/?p=5403)
39+
* [Compliance/Security](https://chaoss.community/?p=5407)
40+
* [Governance](https://chaoss.community/?p=5411)
41+
* [Strategy](https://chaoss.community/?p=5416)
4242

4343
This should provide a simpler basis to experiment with Viability and prove value in organizations curious about the framework for scrutinizing their open source dependencies.
4444

@@ -57,9 +57,9 @@ Intended use of this metrics model is to feed into an overall viability determin
5757
* [Change Requests](https://chaoss.community/?p=3610)
5858
* Projects with very low count of change requests are unlikely to be keeping up with security updates – or with trends for development in their ecosystem. Change requests with high spikes of activity might also indicate that a project doesn’t provide sufficient checks to avoid unnecessary revisions/toil around the same feature.
5959
* [Change Request Closure Ratio](https://chaoss.community/?p=4834)
60-
* This metrics allows us to compare the trend of new requests to their rate of closure. It gives us an idea of how well the project is maintained – or if more maintainers might be needed to keep up with demand for new features. The second point is why this is a cross between “Governance” and “Community”.
60+
* This metric allows us to compare the trend of new requests to their rate of closure. It gives us an idea of how well the project is maintained – or if more maintainers might be needed to keep up with demand for new features. The second point is why this is a cross between “Governance” and “Community”.
6161
* [Libyears](https://chaoss.community/?p=3976)
62-
* Per the objectives of libryear, “assist in the identification of dependencies that have a higher probability of posing stability, security, and vulnerability risks to a project. A long-obsolete component is more likely to have publicly-known vulnerabilities”.
62+
* Per the objectives of libyear, “assist in the identification of dependencies that have a higher probability of posing stability, security, and vulnerability risks to a project. A long-obsolete component is more likely to have publicly-known vulnerabilities”.
6363
* [OSI Approved Licenses](https://chaoss.community/?p=3962)
6464
* Licenses that are found are incorporated in the OSI approved licenses framework. A good proxy for usable licenses within an organization.
6565

0 commit comments

Comments
 (0)