Know, Prevent, Fix: Vulnerabilities in open source

Ah, next stage after their mess of a "criticality score" proposal... (cf https://news.ycombinator.com/item?id=25381397 )

Nice write-up. Did not know about Open Source Security Foundation (OpenSSF).

https://openssf.org/