Analyzed
3 months
ago.
based on code collected
4 months
ago.
Project Summary
OSS Security Score Cards
Goals
1. Automate analysis and trust decisions on the security posture of open source projects.
2. Use this data to proactively improve the security posture of the critical projects the world depends on.
In a Nutshell, OSSF Scorecard...
- ...
- ...
-
...
has a codebase with a long source history
maintained by a very large development team
with decreasing Y-O-Y commits -
...
took an estimated 19 years of effort (COCOMO model)
starting with its first commit in October, 2020
ending with its most recent commit 4 months ago
Quick Reference
https://github.com/ossf/scorecard
Apache License 2.0
Permitted
Commercial Use
Modify
Distribute
Place Warranty
Sub-License
Private Use
Use Patent Claims
Forbidden
Hold Liable
Use Trademarks
Required
Include Copyright
State Changes
Include License
Include Notice
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
There are no reported vulnerabilities
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
30 Day SummaryJan 2 2025 — Feb 1 2025
|
12 Month SummaryFeb 1 2024 — Feb 1 2025
|
