Tool

OpenSSF Scorecard

Automated security health metrics for open-source projects, produced as machine-readable results.

securityscorecards.dev

Where it helps

• Evidence by Default

  Continuously emits security posture signals that can gate consumption without manual packs.

• Govern Dependencies

  Scores help prioritise inherited risk from upstream open-source dependencies.