Develop a tool to determine some metrics for each third-party component

• define which information we could retrieve from mirrors repositories of third-party components to access provenance and following modifications
• develop a script that analyze this information and determine some metrics for each component