Given recent supply chain attacks I think this can be a good idea. But it seems like a lot of work to centralize information in one place. A lot of unpaid work.

Given recent supply chain attacks I think this can be a good idea. But it seems like a lot of work to centralize information in one place. A lot of unpaid work. Because no one is going to pay you for this information. I predict it would soon use three major APIs and leave everyone's private gitea or gitweb install in obscurity.