The Linux Foundation's Core Infrastructure Initiative (CII) is creating a risk score for open-source projects to help identify those in need of funding and …