Comments (2)
I was going to create a PR, but it looks like the README links to the wiki (which is different).
So, I'd like to see the front README link to a wiki page, e.g., the page:
https://github.com/microsoft/OSSGadget/wiki/OSS-Reproducible
In that page I'd like to see contents like this (using OSS-Defog as a template and the oss-reproducible README
====
The purpose of OSS reproducible is to analyze open source packages for semantic reproducibility. We start with an existing package (for example, the NPM "left-pad" package, version 1.3.0), and we try to answer the question, How accurately does the source code represent the published package?
Semantically reproducible builds give confidence that packages are derived from the source code that produced them.
A project build is semantically reproducible
if its build results can be either recreated exactly (a bit for bit reproducible build), or if the differences between the release package and a rebuilt package are not expected to produce functional differences in normal cases.
For example, the rebuilt package might have different date/time stamps, or one might include files like .gitignore that are not in the other and would not change the execution of a program under normal circumstances.
The tool works by applying various strategies to see if it can create a semantically reproducible build.
For more information see the oss-reproducible README.
Then insert usage and sample output.
from ossgadget.
@david-a-wheeler thanks for the proposed content for the page. That looks good to me.
I created the oss reproducible wiki page so it can be linked to from the main readme.
I'll circle back to add usage examples later. #425
from ossgadget.
Related Issues (20)
- oss-metadata for golang (native) errors out
- oss-detect-cryptography directory issues
- oss-detect-backdoor: Add additional patterns HOT 1
- Fail to build Docker image
- Wrong parameter order in OssGadgetLib.cs? HOT 1
- Can not find source for tensorflow and torch package HOT 1
- GITHUB_ACCESS_TOKEN environment variable is never used
- osshealth: NPM purl convention is incomplete, excludes most packages HOT 6
- Don't require encoding for namespaced packages HOT 5
- oss-health doesn't work for github repositories HOT 1
- Please change Reproducible to another term, e.g., Semantically reproducible HOT 5
- Add usage to oss reproducible wiki
- Rename "semantically reproducible build" to something else? HOT 6
- Report if a package is a reproducible build or is just semantically equivalent
- Unable to fetch versions for a Cocoapods package HOT 3
- Replace moq with NSubstitute HOT 2
- Migrate Dockerfile to use Mariner 2
- OSS-Download CLI outputs all output on std error
- Refactor Logging
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ossgadget.