<commit_before># cii-best-practices-badge
Core Infrastructure Initiative Best Practices Badge

This *early* *draft* material identifies proposed best practices
for open source software (OSS), including those that are likely to lead
to secure software.
The goal is to eventually create a "badging" program where OSS projects
that meet the criteria can voluntarily self-certify that they meet the
criteria and then be able to show a badge.
A tool will be used to automatically evaluate some criteria where that
is relatively easy to evaluate (e.g., to determine if the project uses an
OSS license and identifies it in a standard way).

This is a very early version of this document;
we expect a number of changes.
This version of the criteria is *NOT* endorsed by anyone;
we are releasing this early version so we can get feedback.
Feedback is welcome via the GitHub site as issues or pull requests:
https://github.com/linuxfoundation/cii-best-practices-badge
There is also a mailing list for general discussion:
https://lists.coreinfrastructure.org/mailman/listinfo/cii-badges

You can see the [criteria](./criteria.md) and more
[background](./background.md).
<commit_msg>License under (MIT OR CC-BY-4.0)<commit_after># cii-best-practices-badge
Core Infrastructure Initiative Best Practices Badge

This *early* *draft* material identifies proposed best practices
for open source software (OSS), including those that are likely to lead
to secure software.
The goal is to eventually create a "badging" program where OSS projects
that meet the criteria can voluntarily self-certify that they meet the
criteria and then be able to show a badge.
A tool will be used to automatically evaluate some criteria where that
is relatively easy to evaluate (e.g., to determine if the project uses an
OSS license and identifies it in a standard way).

This is a very early version of this document;
we expect a number of changes.
This version of the criteria is *NOT* endorsed by anyone;
we are releasing this early version so we can get feedback.
Feedback is welcome via the GitHub site as issues or pull requests:
https://github.com/linuxfoundation/cii-best-practices-badge
There is also a mailing list for general discussion:
https://lists.coreinfrastructure.org/mailman/listinfo/cii-badges

You can see the [criteria](./criteria.md) and more
[background](./background.md).

All of material is released under both the [MIT license](./LICENSE)
and the
[Creative Commons Attribution 4.0 International (CC BY 4.0) license](https://creativecommons.org/licenses/by/4.0/).
In Software Package Data Exchange (SPDX) notation, this is (MIT OR CC-BY-4.0).

{'fraction_non_alphanumeric': 0.06456513482719331, 'fraction_numerical': 0.0037979491074819596, 'mean_word_length': 4.713665943600867, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 5, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1609141', 'n_tokens_mistral': 713, 'n_tokens_neox': 681, 'n_words': 365}