This task gathers information from the existing projects and available body of knowledge. This includes OpenSSF, GrimoireLab, CHAOSS, and existing research.

This provides sources of data to build an existing and new knowledge base for the case of npm packages.