Third Party Verification - Repo Profiler

[toderash]

This standalone application is intended to check the source repo for specific indicators of the health of the repo and the project it hosts, including certain best-practice checks.

As described in Repo Profiler:

• 2FA enabled/required
• VDP listed
• Uses dependabot & plugin check actions
• Count number of contributors in past n months
• Count number of commits/releases in past n months
• Repo age
• Changelog for all releases
• https enforced e.g., testssl.sh or curl, etc. and check port 80 is closed or redirected
• Append results to fair-forge-meta per spec

Resulting output to STDOUT is fine, can be piped where we need it later. Output format should be along these lines:

• fair-forge-meta spec
• package-meta