scorecard.dev
In short: Getting listed on OpenSSF Scorecard is free. Plan for about 45 minutes — there is material to prepare and a review to wait on.
What they ask for: Run Scorecard on your public component, enable published results, remediate checks, and link the public viewer from repository documentation.
Run Scorecard on your public component, enable published results, remediate checks, and link the public viewer from repository documentation.
Public repository and admin rights are required; scores are heuristic and website exposure is indirect through accurate repository metadata.
Open the submission page on scorecard.dev and complete its form — that is the "Open submit page" link at the top of this page.
Public repository and admin rights are required; scores are heuristic and website exposure is indirect through accurate repository metadata.
Priority sets the band — this one is high. Cost (free) and effort (moderate) move it within that band, which puts it in the high impact tier. The score orders a submission queue. It is not a measure of the site’s domain authority, traffic or quality.