It's openssf… All of their posts are basically "install our github action, get our scorecard!". Which I personally think is completely useless. If they want op

It's openssf… All of their posts are basically "install our github action, get our scorecard!". Which I personally think is completely useless. If they want open source maintainers to do boring compliance stuff, they can pay them. I won't be doing that for free for sure.