Philosophy
Development of OSS Discovery will be guided by both the needs of enterprises, requirements of The Open Source Census, and the desires of the community.
Making Suggestions for the Roadmap
Please add any new enhancements, feature requests or Fingerprints Wanted in the Issue Tracker.
Fingerprint Rules Wanted
This is a list of some of the packages for which we need fingerprint rules written. Our highest priority is open source packages that are used within the library. Please feel free to contribute rules for these packages or add other packages to the list. To learn how to contribute rules, see the Developers Guide. As we add rules for these packages we will notate the completed package name with strike through text.
Package Name
ACE
Rules to find all packages currently available on an Apache mirror
All Apache mods
ANTLR
Any Eclipse Plugin
Following is a list of plugin rules create so far:
* Eclipse Plug-in: Amateras
* Eclipse Plug-in: AspectJ Development Tools (AJDT)
* Eclipse Plug-in: Business Intelligence and Reporting Tools Designer (BIRT)
* Eclipse Plug-in: C/C++ Development Tools (CDT)
* Eclipse Plug-in: Checkstyle
* Eclipse Plug-in: ?ColorEditor
* Eclipse Plug-in: Data Tools Platform (DTP)
* Eclipse Plug-in: Eclipse Graphical Modelling Framework (GMF)
* Eclipse Plug-in: Eclipse Tidy
* Eclipse Plug-in: Eclipse Tools
* Eclipse Plug-in: Graysky ?LogWatcher
* Eclipse Plug-in: Hibernate Tools
* Eclipse Plug-in: JavaSVN-Subclipse Bundle
* Eclipse Plug-in: JBoss AOP
* Eclipse Plug-in: JBoss IDE
* Eclipse Plug-in: JBoss IDE with AOP and EJB3
* Eclipse Plug-in: jBPM
* Eclipse Plug-in: ?JettyLauncher
* Eclipse Plug-in: Mevenide
* Eclipse Plug-in: Model Driven Development Integration
* Eclipse Plug-in: PDE
* Eclipse Plug-in: QuantumDB
* Eclipse Plug-in: QuickREx
* Eclipse Plug-in: SOA Tools Platform (STP)
* Eclipse Plug-in: ?SpellChecker
* Eclipse Plug-in: Spindle
* Eclipse Plug-in: Spring IDE
* Eclipse Plug-in: ?StrutsBox
* Eclipse Plug-in: Subclipse
* Eclipse Plug-in: Test and Performance Tools Platform (TPTP)
* Eclipse Plug-in: UML2
* Eclipse Plug-in: Visual Editor
* Eclipse Plug-in: Visual ?SourceSafe (VSS)
* Eclipse Plug-in: Web Tools Editors
* Eclipse Plug-in: Web Tools Platform
* Eclipse Plug-in: WTP Database
* Eclipse Plug-in: WTP J2EE
Apache Roller
?BeanShell
Blat
Bugzilla
Castor
?CruiseControl
cURL
DBUnit
Derby
Display Tag Library
Dojo Toolkit
DOM4J
Dumbster
FOP
Geronimo
Gimp
?GlassFish
GNU hylafax
GNU Make
Grep
Groovy
GWT
Hibernate Annotations
Hibernate ?EntityManager
HTTPUnit
ICEFaces
iText
Ivy
Jasper Reports
Java Printf
?JavaBeans Activation Framework
?JavaHelp
Jaxen
JBoss Cache
JBoss Seam
JDK
Jena
Jetty
JFreeChart
JMeter
Joda Time
JWebUnit
Lucene
?MediaWiki
Middlegen
MinGW
MSYS
Mule
?MyFaces Tomahawk
?MyFaces
NUnit
OpenJMS
Oro
Ostermiller Java Utils
Pidgin
PocketSOAP
Protomatter
Prototype
Putty
Python
Regexp
Samba
Saxon
Script.aculo.us
sudo
TAO
Tcl/Tk
Tobago
XDoclet
XJavaDoc
zlib
TODO List
The TODO list contains high priority issues (features and defects) which need to be addressed, but are not yet in progress. If you are looking to contribute to the project - this is a great place to start.
Issue Number
Name
Description
DIS-9
User can optionally choose to show or hide bundled projects in results report
As a user, I may only be interested in seeing the "primary" projects found on my system. For instance, if Spring and Struts are both bundled with commons-logging and junit, I may only want to see that Struts & Spring are installed, and not that I have Struts, Spring, and 2 instances each of commons-logging and junit.
DIS-22
User is able to see a list of directories or files which could not be scanned
In addition to the directories/files scanned I would also like to see a count for what it couldn't scan as a link( or expander ) so people could see where it got cut off. An Example of where this would come in handy if the user was trying to verify all open source software they were currently using on a web server they might want to run the scan as the web server user, but if someone left a directory as root:other 750 they wouldn't see any information about it.
DIS-89
Store all error messages in a resource file
Will ease standardization and translation issues.
DIS-291
OSS Discovery finds OSS contained in war file
It is not uncommon for open source packages to be included in war files for use in production environments. Discovery should "look inside" these archives, treating the archive as if it were a directory to scan.
DIS-292
OSS Discovery finds OSS contained in ear file
It is not uncommon for open source packages to be included in ear files for use in production environments. Discovery should "look inside" these archives, treating the archive as if it were a directory to scan.
DIS-293
OSS Discovery finds OSS contained in zip file
It is not uncommon for open source packages to be included in zip files. OSS Discovery should "look inside" these archives, treating the archive as if it were a directory to scan.
DIS-294
OSS Discovery finds OSS contained in tar file
It is not uncommon for open source packages to be included in tar files. OSS Discovery should "look inside" these archives, treating the archive as if it were a directory to scan.
DIS-249
Throttle scanner
When a user runs a scan on a production machine, she does not want the scanner to take all system resources. We should provide her with a parameter that will throttle the max amount of system resources that the scanner will consume. Every x number of files, pause for y number of seconds. This should be configurable, but have reasonable defaults. Functionality must be documented in users guide.
DIS-296
User wants to find only GPL licensed software
User may want to locate only open source software with a given license type. We should allow her to specify which license types she is interested in, and only report those found packages which are licensed under the given licenses.
DIS-471
Package OSS Discovery with Ruby
Package with Ruby as a convenience to users.
Validating a specific environment.
To achieve a status of 'Validated', as seen in the matrix below, follow these steps:
- Check out the source code
- If validating a linux or *nix platform, find the "run-me.sh" scripts in the directories hidden-tests, symlink-tests, permission-tests (all located in app/test/resources/content-cg) and execute them. This sets up specific test conditions that can't be setup with a simple svn checkout.
Run the same test suite that the Continuous Integration server runs: ruby ./path/to/ts_test_ci.rb
- If all tests pass (if there are no failures or errors) then the platform may be considered 'Validated'
Platforms
Below is a list of platforms that we'd like to support with their current status. A status of validated indicates that OSS Discovery unit tests (ts_test_ci.rb) have been successfully run on this platform (no errors or failures). If you have access to one of the platforms which are not yet validated please contribute by validating OSS Discovery on that platform and posting the unit test results to the Developer Mailing List.
Operating System
Version
Architecture
Status
Date Validated
By Whom
Red Hat Linux Fedora Core
5
32-bit x86
Validated08 Dec 2007
landonc
Red Hat Linux Fedora Core
5
64-bit x86
Not yet validated
N/A
N/A
Red Hat Linux Fedora Core
6
32-bit x86
Not yet validated
N/A
N/A
Red Hat Linux Fedora Core
6
64-bit x86
Not yet validated
N/A
N/A
Red Hed Enterprise Linux
3
32-bit x86
Not yet validated
N/A
N/A
Red Hed Enterprise Linux
3
64-bit x86
Not yet validated
N/A
N/A
Red Hed Enterprise Linux
4
32-bit x86
Validated08 Dec 2007
landonc
Red Hed Enterprise Linux
4
64-bit x86
Not yet validated
N/A
N/A
Red Hed Enterprise Linux
5
32-bit x86
Validated07 Dec 2007
eweidner
Red Hed Enterprise Linux
5
64-bit x86
Validated07 Dec 2007
eweidner
Ubuntu
6.06
32-bit x86
Not yet validated
N/A
N/A
Ubuntu
6.06
64-bit x86
Not yet validated
N/A
N/A
Ubuntu
6.10
32-bit x86
Not yet validated
N/A
N/A
Ubuntu
6.10
64-bit x86
Not yet validated
N/A
N/A
Ubuntu
7.04
32-bit x86
Validated07 Dec 2007
bnoll
Ubuntu
7.04
64-bit x86
Validated07 Dec 2007
bnoll
Ubuntu
7.10
32-bit x86
Validated07 Dec 2007
bnoll
Ubuntu
7.10
64-bit x86
Validated07 Dec 2007
eweidner
SLES
9
32-bit x86
Not yet validated
N/A
N/A
SLES
9
64-bit x86
Not yet validated
N/A
N/A
SLES
10
32-bit x86
Not yet validated
N/A
N/A
SLES
10
64-bit x86
Not yet validated
N/A
N/A
SLED
9
32-bit x86
Not yet validated
N/A
N/A
SLED
9
64-bit x86
Not yet validated
N/A
N/A
SLED
10
32-bit x86
Not yet validated
N/A
N/A
SLED
10
64-bit x86
Validated07 Dec 2007
landonc
Sun Solaris
8
32-bit SPARC
Validated07 Dec 2007
landonc
Sun Solaris
8
32-bit x86
Not yet validated
N/A
N/A
Sun Solaris
8
64-bit x86
Not yet validated
N/A
N/A
Sun Solaris
9
32-bit SPARC
Validated07 Dec 2007
landonc
Sun Solaris
9
32-bit x86
Not yet validated
N/A
N/A
Sun Solaris
9
64-bit x86
Not yet validated
N/A
N/A
Sun Solaris
10
32-bit SPARC
Validated07 Dec 2007
landonc
Sun Solaris
10
32-bit x86
Not yet validated
N/A
N/A
Sun Solaris
10
64-bit x86
Not yet validated
N/A
N/A
AIX
5.1
32-bit PPC
Not yet validated
N/A
N/A
AIX
5.1
64-bit PPC
Not yet validated
N/A
N/A
AIX
5.2
32-bit PPC
Not yet validated
N/A
N/A
AIX
5.2
64-bit PPC
Not yet validated
N/A
N/A
AIX
5.3
32-bit PPC
Not yet validated
N/A
N/A
AIX
5.3
64-bit PPC
Not yet validated
N/A
N/A
AIX
6.1
32-bit PPC
Not yet validated
N/A
N/A
AIX
6.1
64-bit PPC
Not yet validated
N/A
N/A
HP-UX
10
64-bit PA-RISC
Not yet validated
N/A
N/A
HP-UX
10
64-bit Itanium
Not yet validated
N/A
N/A
HP-UX
11
64-bit PA-RISC
Not yet validated
N/A
N/A
HP-UX
11
64-bit Itanium
Not yet validated
N/A
N/A
Mac OS X
10.4
64-bit x86
Validated07 Dec 2007
landonc
Mac OS X
10.4
32-bit PPC
Validated07 Dec 2007
landonc
Mac OS X
10.4
64-bit PPC
Not yet validated
N/A
N/A
Mac OS X
10.5
64-bit x86
Not yet validated
N/A
N/A
Mac OS X
10.5
32-bit PPC
Validated14 Dec 2007
rmoore
Mac OS X
10.5
64-bit PPC
Not yet validated
N/A
N/A
Microsoft Windows
2000
32-bit x86
Validated07 Dec 2007
landonc
Microsoft Windows
XP
32-bit x86
Validated07 Dec 2007
nbobbin
Microsoft Windows
XP
64-bit x86
Validated07 Dec 2007
eweidner
Microsoft Windows
Vista
32-bit x86
Not yet validated
N/A
N/A
Microsoft Windows
Vista
64-bit x86
Not yet validated
N/A
N/A
Microsoft Windows
Server 2003
32-bit x86
Validated07 Dec 2007
landonc
Microsoft Windows
Server 2003
64-bit x86
Not yet validated
N/A
N/A
Milestones
Following are the currently planned milestones along with their themes and rough dates. All dates are, of course, subject to change.
Release Name
Themes
Date
Gemini
Client with minimal fingerprints and ability to post results
07 Dec. 2007
More soon
Ideas
The ideas section of the roadmap is a place for, well, for ideas. These are themes, features, etc. which are not yet planned as they are still in a nebulous state. Future themes will likely come from ideas listed here. Please contribute your thoughts to existing ideas or add your own ideas here.
Title
Description
More soon
