Method and system for scoring a software artifact for a user

A computer system, comprising:

• a transceiver operable to transmit and receive communications over at least a portion of a network;
• and
• a processor cooperatively operable with the transceiver, and configured to facilitate:
• collecting, from a software repository by communication over the transceiver, metadata associated with a software artifact about project activity of how active an artifact project is to which the software artifact belongs, a security risk indicated in the metadata of the software artifact, or a license indicated in the metadata of the software artifact;
• determining a weighting, without regard to an intended use of the software artifact by a user, of the software artifact alone from the metadata associated with the software artifact that indicates desirability of the project activity, the security risk, or the license;
• comparing the metadata associated with the software artifact to appropriateness with a metadata of a user project to which the user belongs as indicated by a profile of the user, so as to provide a score considering the determined weighting of the software artifact and an appropriateness of the software artifact for the user with respect to the intended use of the software artifact by the user;
• and
• interacting with the user to collect human-provided metadata including a community ranking specific to the software artifact, storing the human-provided metadata in relation to the software artifact, and using the human-provided metadata to further adjust the score of the software artifact.

A non-transitory computer-readable medium comprising instructions for execution by a computer, the instructions including a computer-implemented method for providing a method for scoring a software artifact for a user, the instructions for implementing:

• collecting, from a software repository by communication over a transceiver, metadata associated with a software artifact about project activity of how active an artifact project is to which the software artifact belongs, a security risk indicated in the metadata of the software artifact, or a license indicated in the metadata of the software artifact;
• determining a weighting, without regard to an intended use of the software artifact by a user, of the software artifact alone from the metadata associated with the software artifact that indicates desirability of the project activity, the security risk, or the license;
• comparing the metadata associated with the software artifact to appropriateness with a metadata of a user project to which the user belongs as indicated by a profile of the user, so as to provide a score considering the determined weighting of the software artifact and an appropriateness of the software artifact for the user with respect to the intended use of the software artifact by the user;
• and
• interacting with the user to collect human-provided metadata including community ranking specific to the software artifact, storing the human-provided metadata in relation to the software artifact, and using the human-provided metadata to further adjust the score of the software artifact.