OpenSSF Scorecard: On the Path Toward Ecosystem-wide Automated Security Metrics

Nusrat Zahan; Parth Kanakiya; Brian Hambleton; Shohanuzzaman Shohan; Laurie Williams

doi:10.1109/MSEC.2023.3279773

OpenSSF Scorecard: On the Path Toward Ecosystem-wide Automated Security Metrics

Cryptography and Security 2023-06-16 v4

Authors: Nusrat Zahan , Parth Kanakiya , Brian Hambleton , Shohanuzzaman Shohan , Laurie Williams

View on arXiv ↗ PDF ↗ DOI ↗

Abstract

The OpenSSF Scorecard project is an automated tool to monitor the security health of open-source software. This study evaluates the applicability of the Scorecard tool and compares the security practices and gaps in the npm and PyPI ecosystems.

OpenSSF Scorecard: On the Path Toward Ecosystem-wide Automated Security Metrics

Abstract

Keywords

Cite

Comments

Related papers