Today, I want to share with you a new initiative by OpenSSF called the Open Source Project Security Baseline.
The TL;DR: This initiative consists of a series of checks that project maintainers must have in place in their software repositories to demonstrate a strong security posture.
The baseline is divided into three well defined levels. I find this to be an interesting and practical initiative, easy to apply for improving and certifying a project’s security level.
The initiative was announced here, and you can find the official website for this exciting new project here!