TrustSECO: A Distributed Autonomous Organization for a Safer Worldwide Software Ecosystem

In a digital world, dependencies on software are increasing. With these increasing dependencies, a great need for safe and trustworthy software arises. We present TrustSECO, a software product designed for the global software users and developers’ community. The main goal of the software is to implement a convenient way for people to judge the trustworthiness of software packages. To realize this goal, we created a blockchain. On this blockchain, people can contribute to the community by sending in data about the trustworthiness of packages. To simplify this process, we included a program that can generate these data points automatically. To indicate the trustworthiness of a package, we implemented an algorithm that will generate a trust score based on the facts stored on the blockchain. In this report, we present the documentation for our thesis project.