ossf/best-practices-badge
🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge) observed · 2026-08-28
Health v2 · maintenance only
95/100
- Activity 99
- Release rhythm 87
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 0
- age_days: 4060
- days_rel: 8
- days_push: 7
- n_releases_24m: 92
Adoption not part of the score
1357 stars · 234 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
The OpenSSF Best Practices Badge is a web application (BadgeApp) that lets Free/Libre and Open Source Software projects self-certify that they follow open source best practices and display a badge. It defines the badge criteria and hosts the badging service at bestpractices.dev, formerly known as the CII Best Practices Badge.
Use cases
- get an open source best practices badge for my project
- self-certify my floss project against security best practices
- check whether an open source project follows best practices
- show a supply-chain security badge in my github readme
- evaluate open source projects for secure development practices
When to choose
- you maintain an open source project and want to demonstrate best practices
- you want to assess the maturity and security hygiene of dependencies
- you need a recognized OpenSSF badge for supply-chain compliance
When to avoid
- you need automated security scanning rather than self-certification
- you want a static analysis or vulnerability detection tool
- your project is not open source
Facets
application · maturity active
security web-framework developer-tools documentation security developer-tools self-hosted web-development ruby openssf badge best-practices floss supply-chain-security self-certification rails cii open-source web-server linux docker
3 sources
- readme: https://github.com/ossf/best-practices-badge · fetched 2026-08-28 · 0a721aa12399
- homepage: https://www.bestpractices.dev · fetched 2026-08-29 · 70db4a2a7790
- site_page: https://www.bestpractices.dev/en/cookies · fetched 2026-08-29 · 06a95efeb2b4
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ossf/best-practices-badge | main | 95 |
For agents
markdown · JSON · MCP: product_card(name="ossf/best-practices-badge")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem