H
“Security context belongs next to the artifact.”
OpenSSF Scorecard documents a machine-generated security scoring approach while explaining checks, usage, interpretation, integrations, and limitations for open-source projects.
security/threat-inteltype:referenceopenssfsecurityscoringsupply-chain