PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI? - Nusrat Zahan; Parth Kanakiya; Brian Hambleton; Shohanuzzaman Shohan; Laurie A. Williams (CoRR, 2022)

OpenSSF Scorecard: On the Path Toward Ecosystem-Wide Automated Security Metrics. - Nusrat Zahan; Parth Kanakiya; Brian Hambleton; Shohanuzzaman Shohan; Laurie A. Williams (IEEE Secur. Priv., 2023)