ossf-scorecard

OpenSSF Scorecard Explained: Measuring Open Source Security Health

OpenSSF Scorecard scores a repository against automated security checks and gives you a 0-10 signal for how safe a dependency is to adopt. Here is how it works and how to run it.