OpenSSF Scorecard

OpenSSF Scorecard is an open-source project for checking security practices in software repositories.

Scorecard assesses open-source projects against security practices and reports potential areas of risk.

The official project site explains its checks and links to documentation on interpreting results and running the tool.