ossf

OpenSSF Scorecard - Security health metrics for Open Source

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Gives criticality score for an open source project

GitHub App to set and enforce security policies

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

The Best Practices for OSS Developers working group is dedicated to raising awareness and education of secure code best practices for open source developers.

Open Source Package Analysis

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.