How OpenSSF Scorecards can help to evaluate open-source software risks
Scorecards automatically generates a score for open-source projects based on potential vulnerabilities and dependencies.
Marc Andreessen Chain Levels For Software Artifacts Software Development Framework Source Software Software Supply Chain Best Practices Linux Foundation
Source: csoonline.com