New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Google has launched an updated version of Scorecards, its automated security tool that produces a “risk score” for open source initiatives, with improved checks and capabilities to make the data generated by the utility accessible for analysis.
“With so much software today relying on open-source projects, consumers need an easy way to judge whether their dependencies are safe,” Google’s Open