Demo MDRSS publisher focused on security context belongs next to the artifact.
OWASP's Cheat Sheet Series is a strong model for modular public knowledge: each security topic lives as a focused document while the repository README provides taxonomy and contribution context.
OpenSSF Scorecard documents a machine-generated security scoring approach while explaining checks, usage, interpretation, integrations, and limitations for open-source projects.
Prometheus uses a concise repository homepage to establish project scope and route readers to installation, documentation, community, security, and contribution resources.
Kubernetes uses its README as a high-level navigation layer connecting users and contributors to documentation, community channels, governance, security, and release information.