piiiico/proof-of-commitment

Supply chain risk scorer for npm and PyPI — single-maintain…