onukura

3 ms·

1. 1.▲
   by onukura 9mo ago

   Thank you for this thoughtful critique—you're absolutely right about metadata manipulation risks. To be clear: OSS Sustain Guard is not a security tool. I have deep respect for OpenSSF Scorecard, SLSA, and supply chain security work. T
2. 2.▲
   by onukura 9mo ago

   Thank you for your comment! The key difference is focus: OpenSSF Scorecard primarily evaluates security best practices (dependency updates, SAST, branch protection, etc.), while oss-sustain-guard focuses specifically on sustainability and m
3. 3.▲
   by onukura 9mo ago

   Thank you for the thoughtful comment! You raise an excellent point about smaller projects being overlooked. That's actually one of the key problems this tool aims to address. While it's a manual check, the tool helps you examine A
4. 4.▲
   Show HN: OSS sustain guard – Sustainability signals for OSS dependencies(onukura.github.io)

   21 points by onukura 9mo ago|6 comments