OpenSSF Scorecard - security health metrics for open source
Scorecard assesses open source projects for security risks through a series of automated checks. It gives maintainers a way to evaluate whether their dependencies are safe, and awards each check a score that can be used to identify specific areas to improve in order to strengthen the security posture of a project.
Scorecard assesses open source projects for security risks through a series of automated checks. It gives maintainers a way to evaluate whether their dependencies are safe, and awards each check a score that can be used to identify specific areas to improve in order to strengthen the security posture of a project.
To install scorecard, run the following command in macOS terminal (Applications->Utilities->Terminal)
sudo port install scorecard
To see what files were installed by scorecard, run:
port contents scorecard
To later upgrade scorecard, run:
sudo port selfupdate && sudo port upgrade scorecard
Reporting an issue on MacPorts Trac
The MacPorts Project uses a system called Trac to file tickets to report bugs and enhancement requests.
Though anyone may search Trac for tickets, you must have a GitHub account in order to login to Trac to create tickets.