https://news.ycombinator.com/item?id=32956218#32957137 https://news.ycombinator.com/item?id=32956218#32957137 > FWIW, while this specific act may not be enforc

https://news.ycombinator.com/item?id=32956218#32957137 https://news.ycombinator.com/item?id=32956218#32957137 > FWIW, while this specific act may not be enforcing significant regulation, software developers need to understand that there's a ticking clock. There are several initiatives from LF's OpenSSF and startup Chainguard. Sept 2022, "Concise Guide for Evaluating Open-Source Software", https://github.com/ossf/wg-best-practices-os-developers/blob/main/docs/Concise-Guide-for-Evaluating-Open-Source-Software.md#readme https://github.com/ossf/wg-best-practices-os-developers/blob... Sept 2022, "Show off your Security Score: Announcing Scorecards Badges", https://openssf.org/blog/2022/09/08/show-off-your-security-score-announcing-scorecards-badges/ https://openssf.org/blog/2022/09/08/show-off-your-security-s...