They used OpenSSF Scorecard to check the most starred AI projects on GitHub and found that many of them didn’t fare well.

The article is based on the report from Rezilion. You can find the report here: https://info.rezilion.com/explaining-the-risk-exploring-the-large-language-models-open-source-security-landscape (any email name works, you’ll get access to the report without email verification)