Loading page
bestpractices.dev
In short: Getting listed on OpenSSF Best Practices Badge is free. Plan for about 10 minutes — it is a form plus links and assets you already have.
What they ask for: Open-source your well-scoped component, document its governance, tests, security process, and complete the passing-badge self-assessment.
Open-source your well-scoped component, document its governance, tests, security process, and complete the passing-badge self-assessment.
Only genuine FLOSS projects qualify; claims are checked and must be backed by public evidence, including a public repository, license, contribution path, HTTPS, tests, and vulnerability-reporting process.
Open the submission page on bestpractices.dev and complete its form — that is the "Open submit page" link at the top of this page.
Only genuine FLOSS projects qualify; claims are checked and must be backed by public evidence, including a public repository, license, contribution path, HTTPS, tests, and vulnerability-reporting process.
Priority sets the band — this one is do first. Cost (free) and effort (quick) move it within that band, which puts it in the highest impact tier. The score orders a submission queue. It is not a measure of the site’s domain authority, traffic or quality.