OpenSSF Scorecard v5.6.0, local mode, on heimdall at b8ff56c8: 4.9 / 10 (the aggregate of the checks local mode runs).
| check | score | reason |
| Binary-Artifacts | 1 / 10 | binaries present in source code |
| Dangerous-Workflow | inconclusive | no workflows found |
| Dependency-Update-Tool | 0 / 10 | no update tool detected |
| Fuzzing | 10 / 10 | project is fuzzed |
| License | 9 / 10 | license file detected |
| Packaging | inconclusive | packaging workflow not detected |
| Pinned-Dependencies | inconclusive | no dependencies found |
| SAST | 0 / 10 | no SAST tool detected |
| Security-Policy | 10 / 10 | security policy file detected |
| Token-Permissions | inconclusive | No tokens found |
| Vulnerabilities | 9 / 10 | 1 existing vulnerabilities detected |
Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.