The initiative is designed to improve the security of open-source projects and push tech firms to adopt best practices.
