2 ms·
Scoring framework: https://securityscorecards.dev/ https://securityscorecards.dev/ Code: https://github.com/ossf/scorecard https://github.com/ossf/scorecard A
by transpute 3y ago
Scoring framework: https://securityscorecards.dev/ https://securityscorecards.dev/
Code: https://github.com/ossf/scorecard https://github.com/ossf/scorecard
April 2024 ranking of OSS projects by criticality, 100MB CSV: https://commondatastorage.googleapis.com/ossf-criticality-score/index.html?prefix=2024.04.01/230012/ https://commondatastorage.googleapis.com/ossf-criticality-sc...
- ChrisMarshallNY 3y agoThanks! I have a friend that used to work for a company called “SecurityScorecard.” Different beast, though. I think the idea was similar.
- guappa 3y agoThe scorecard stuff is flawed. You want to decide if something is secure or insecure but without reading the code. It's never going to have any correlation.