Assign ordered supply-chain risk flags to 57 PyPI packages from registry metadata and OpenSSF Scorecard…

Assign ordered supply-chain risk flags to 57 PyPI packages from registry metadata and OpenSSF Scorecard…: a task in pool-desk (Harbor dataset). Hi, I'm doing a supply-chain risk pass over 57 of our PyPI dependencies using a registry snapshot taken on 2026-07-21 and OpenSSF Scorecard results.