Develop a tool to determine some metrics for each third-party component
- define which information we could retrieve from mirrors repositories of third-party components to access provenance and following modifications
- develop a script that analyze this information and determine some metrics for each component