Why is Coverity giving the results away?
The Scan project began in collaboration with Stanford University. It started under a contract with the Department of Homeland Security to harden open source software which provides critical infrastructure for the Internet. The result has been overwhelming. With over 6,000 defects fixed in the first year – averaging over 16 fixes every day of the year, recognition of benefits from the Scan results has been growing steadily. Requests for access to the results and inclusion of additional projects has shown that the open source community recognizes the benefits of the analysis. In response, Coverity is dedicating resources to Scan beyond the requirements of the DHS contract. Many additional projects will have access to their analysis results this year. We will also include projects outside the scope of critical infrastructure, since preventing crashes and data-loss are worthwhile contributions in those codebases as well.
