Looking for a Maturity Grid that Allow Developers in Orgs to Select an Open Source Project to Contribute to Its Sustainability

[anajsana]

This discussion was shared via TODO Slack and has been anonymized

I am looking for a maturity grid that will allow me to select an open source project that we could adopt in a company

[anajsana]

Anonymous person answered

Could you elaborate more? is it in terms of assessing the readiness of a project? If so, which variables are you looking for? security best practices implemented, community activity, documentation, governance?

[anajsana]

Anonymous person answered

Some possible resources could be reviewing attributes listed in https://github.com/chaoss/wg-risk and tools like https://securityscorecards.dev/viewer/ to see if a maintainer is adopting some of the more common security practices. https://snyk.io/advisor/ has some popular ecosystems covered where you can get a sense of viability.

[anajsana]

Anonymous Author Replied

Thanks for your reply! It's to help developers to chose viable open source projects to contribute to sustainability. Indeed which metrics they have to consider.

[anajsana]

Anonymous person answered

This Practitioner Guide may be of some help: https://chaoss.community/practitioner-guide-contributor-sustainability/
We also have several metrics models that look at project viability. Here's a three part blog post series about those models:
https://chaoss.community/oss-viability-metric-supermodel/
https://chaoss.community/viability-metrics-what-its-made-of/
https://chaoss.community/chaoss-guide-oss-viability/

[anajsana]

Anonymous person answered

You may find something useful in https://chaoss.community/kbtopic/all-metrics/ but without more context is hard to tell.