Common Metadata eXchange (CMX) helps you share public and private metadata in a portable and unified way to make it easier to reuse it and plug into automation pipelines and workflows
The Tidelift Subscription provides access to a continuously curated stream of human-researched and maintainer-verified data on open source packages and their licenses, releases, vulnerabilities, and development practices.