OpenFISMA

I Use This!

Activity Not Available

Analyzed over 4 years ago. based on code collected over 6 years ago.

Project Summary

The OpenFISMA project is an open source application designed to reduce the complexity and automate the regulatory requirements of the Federal Information Security Management Act (FISMA) and the National Institute of Science and Technology (NIST) Risk Management Framework (RMF). While many security managers are eager to demonstrate their best practices for incident response, patch management, and configuration management, they are overwhelmed with the reporting and documentation requirements of FISMA.

In a Nutshell, OpenFISMA...

...
has had 5,519 commits made by 29 contributors
representing 1,044,517 lines of code
...
is mostly written in JavaScript
with a very well-commented source code
...
has a codebase with a long source history
maintained by nobody
with stable Y-O-Y commits
...
took an estimated 288 years of effort (COCOMO model)
starting with its first commit in October, 2007
ending with its most recent commit over 6 years ago

Quick Reference

James Ford, boydjd, and mehaase

Licenses

GNU General Public License v3.0 only

Permitted

Commercial Use

Modify

Distribute

Place Warranty

Use Patent Claims

Forbidden

Sub-License

Hold Liable

Required

Distribute Original

Disclose Source

Include Copyright

State Changes

Include License

Include Install Instructions

These details are provided for information only. No information here is legal advice and should not be used as such.

All Licenses

This Project has No vulnerabilities Reported Against it

Did You Know...

...
Black Duck offers a free trial so you can discover if there are open source vulnerabilities in your code
...
you can subscribe to e-mail newsletters to receive update from the Open Hub blog
...
55% of companies leverage OSS for production infrastructure
...
data presented on the Open Hub is available through our API

Code locations have been removed since last analysis

At one point, Open Hub analyzed source code for this project based on code location(s) available at that time. Since then, the code locations have been removed.