Scorecard - A tool for assessing the security posture of open-source projects based on best practices and potential risks. https://github.com/ossf/scorecard