Score project dependencies for vulnerability exposure, license compliance, maintenance health, and supply chain risk. Su