OpenSSF Scorecard

OpenSSF Scorecard logo

Assess open source projects for security risks through automated checks.

Scorecard’s focus is to quickly assess open source project. Each check returns a score out of 10 and a risk level. Make informed decisions about accepting security risks within your codebase, or evaluate other projects and dependencies.

Visit Project Website
Scorecard example

View a Project’s Score

To see scores for projects regularly scanned by Scorecard, navigate to the webviewer. You can also replace the placeholder text (platform, user/org, and repository name) in the following template link to generate a custom Scorecard link for a repo: https://scorecard.dev/viewer/?uri=<github_or_gitlab>.com/<user_name_or_org>/<repository_name>

For example: