I am maintainer of couple of OSS projects https://github.com/ossf/scorecard https://github.com/ossf/scorecard https://github.com/ossf/package-analysis https://g

I am maintainer of couple of OSS projects https://github.com/ossf/scorecard https://github.com/ossf/scorecard https://github.com/ossf/package-analysis https://github.com/ossf/package-analysis These projects help with repository best practices and does some level of npm package analysis based on rules.