otakugeekx@gmail.com Lucas Couto OpenSSF Scorecard assesses an open source project against a set of security heuristics (branch protection, pinned dependencies, token permissions, signed releases, fuzzing, SAST and more) and assigns each a score from 0 to 10, for a repository or a package. https://github.com/ossf/scorecard/issues ossf/scorecard