Hi folks! I chatted with @mcollina and he suggested I file an issue.

For my @openjs-foundation "Security Engineering Champion" role, i'm working on getting the OpenSSF best practices badge on a bunch of OpenJS projects. I did nvm, and now i'm planning to work on fastify. I'm hoping that's OK with all of you?

I've created a best practices project myself, and can later add any maintainers who create an account and give me their user ID (so yall can maintain it moving forward).

Assuming this is OK, I'll likely be asking questions as i go to clarify, but the intention is to spare you folks the majority of the work to document what you're already doing.