OWASP SCVS
Package Management Requirements V4