Which solution will we audit?
Between 17 June and 8 July, you sent the EU-Fossa project 3282 answers, to help us choose which open source software to audit.
First, thank you very much for the many interesting and encouraging comments!
This pie-chart aggregates the result of your input:
The detailed survey results are available in the ODS spreadsheet attached to this post. The document will include all the comments and suggestions submitted in the survey.
As explained in the survey, we used two criteria to make a choice:
- how much the software is used inside and outside of the EU institutions; and
- how critical the software is for the institutions and its users.
Based on your comments, we narrowed down the list of software solutions to two. The first - Apache HTTP Server - is related to web infrastructure. The second – Keepass - is an application used directly by many users.
Our next steps include automatic and manual code review. You can read about the methodogy here: https://joinup.ec.europa.eu/page/project-deliveries.
We will keep you informed on our progress.
Again, thanks for your contribution!
The EU-FOSSA Team
Comments
Why choosing KeePass and not KeePassX ? KeePass is using the .NET Framework, you will find security holes in .NET and then ? Nothing. KeePass is not really multi-platform. KeePassX is really multi-Plateform and proprietary software independant.
https://www.keepassx.org