Linux Foundation's trust scorecards aim to battle rising open-source security threats

How do you tell the difference between trustworthy open-source developers and hackers? Here's one idea.