[snaveen]

I am maintainer of couple of OSS projects https://github.com/ossf/scorecard https://github.com/ossf/package-analysis

These projects help with repository best practices and does some level of npm package analysis based on rules.

[snaveen]

These projects are under https://github.com/ossf which is part of Linux foundation.