A software prototype that scores the security of intstalled packages based on information like daily downloads and publisher activity