OpenSSF Scorecard

scorecard.dev

Quickly assess open source projects for risky practices

关键词：scorecards, scorecard, openssf, slsa, sigstore, security, vulnerabilities, cve, supply chain, supply-chain