Collection of security best practices for package managers. - View it on GitHub