The CISA document lays out a way to measure open source, but we take issue with the idea of trying to measure which open source projects are “good”. Trying to measure open source isn’t producing anything actionable, but getting involved is very actionable, and very much how open source works. Show Notes#