slsa vs infracost

Compare slsa and infracost using verifiable project signals, licensing and public GitHub data.