PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI?

IEEE Security and Privacy (IEEE S&P), 2022

6 August 2022

Abstract

The OpenSSF Scorecard project is an automated tool to monitor the security health of open source software. We used the tool to understand the security practices and gaps in npm and PyPI ecosystems and to confirm the applicability of the Scorecard tool.

View on arXiv

Comments on this paper