https://www.techradar.com/news/google-doubles-down-on-program-to-score-the-security-risk-of-open-source-software
