Description:
Security health metrics for Open Source
|
|
Type: Formula
|
Latest Version: 5.4.0@0
|
Tracked Since: Dec 27, 2025
|
|
Links:
Homepage |
@ossf |
formulae.brew.sh
|
|
Category: Security
|
|
Tags:
security
open-source
devsecops
dependencies
audit
|
|
Install:
brew install scorecard
|
About:
Scorecard is an automated security tool that assesses the security posture of open-source projects. It uses a series of automated checks to evaluate risks like vulnerabilities, maintenance activity, and security practices. Its main value is providing a standardized, data-driven security score to help users evaluate dependencies and maintainers improve their projects.
|
Key Features:
- Automated security risk assessments
- Standardized scoring (0-10) for easy comparison
- Checks for vulnerabilities, CI/CD, and code review practices
- Supports GitHub and GitLab repositories
- Can be run via CLI, API, or GitHub Action
|
Use Cases:
- Evaluating the security risk of open-source dependencies before integration
- Monitoring the security health of your organization's own open-source projects
- Prioritizing security improvements based on automated check results
|
Alternatives:
-
Snyk Open Source
– Commercial SCA tool with broader vulnerability scanning and license compliance.
-
deps.dev
– Google's service for analyzing package dependencies and vulnerabilities.
|
| Detected |
Version |
Rev |
Change |
Commit |
| Dec 27, 2025 6:36pm |
5.4.0 |
0 |
VERSION_BUMP |
0320b920 |
| Sep 30, 2025 5:19pm |
|
0 |
VERSION_BUMP |
dfaa5b71 |
| Sep 15, 2025 10:17pm |
|
0 |
VERSION_BUMP |
5d3412bc |
| Sep 14, 2024 4:46pm |
|
0 |
VERSION_BUMP |
83e34110 |
| Oct 20, 2023 6:09pm |
|
0 |
VERSION_BUMP |
7278e55a |
| Aug 7, 2023 6:56pm |
|
0 |
VERSION_BUMP |
40b5362c |
| Mar 17, 2023 1:34am |
|
0 |
VERSION_BUMP |
d5d52ba3 |
| Mar 17, 2023 1:34am |
|
0 |
VERSION_BUMP |
f5bf145b |
| Dec 22, 2022 4:06am |
|
0 |
VERSION_BUMP |
fc648739 |
| Dec 22, 2022 4:06am |
|
0 |
VERSION_BUMP |
82747bcb |
| Dec 18, 2022 5:33pm |
|
0 |
VERSION_BUMP |
f71ad0b3 |
| Dec 18, 2022 5:33pm |
|
0 |
VERSION_BUMP |
dc744c38 |
| Dec 14, 2022 1:32am |
|
0 |
VERSION_BUMP |
fdcd383a |
| Dec 14, 2022 1:32am |
|
0 |
VERSION_BUMP |
ce42a4eb |
|