OpenSSF project

Package Analysis

Dynamically and statically analyzes packages from open source package registries to detect malicious behavior such as credential exfiltration and backdoors.