Open Source Security Foundation (OpenSSF), in which Google also participates, announced 'Security Scorecards' that can automatically evaluate the safety of open source projects. Security Scorecards ...