Patent ID: 8875090

Claim:
A computer-implemented method for monitoring a software project that includes one or more software artifacts for a user, comprising: collecting and storing artifact information related to one or more software artifacts, the artifact information including: an artifact identifier for each of the one or more artifacts, project identifiers for any of one or more software projects that use each of the one or more artifacts, information about the temporal version for the one or more artifacts; collecting and storing project information related to the one or more software projects that use the one or more software artifacts, the project information including: a project identifier for each of the one or more projects, and contact information for a user of the software project; collecting, from a software repository by communication over the transceiver, metadata associated with the one or more software artifacts, the metadata for each of the one or more software artifacts including: information identifying the respective artifact, information about security risks associated with the respective artifact, information about a license associated with the respective artifact, or information indicative of a level of use or user rating of the respective artifact; periodically or continually monitoring the metadata to determine whether there has been any actionable change in the metadata associated with the one or more software artifacts; notifying the user of any software project that uses a software artifact for which there has been an actionable change about the actionable change, the notifying operation being performed via the transceiver using the contact information; and wherein the project information includes evaluation criteria for each of the one or more software artifacts used by each of the one or more projects, the project evaluation criteria identifying what makes a change in the metadata actionable, wherein the metadata is continually monitored for actionable changes, and wherein the continual monitoring includes detecting a change in the metadata associated with the one or more software artifacts, and determining whether the change in the metadata is actionable for a respective software project based on the evaluation criteria in a respective set of project information.