slsa vs worldmonitor

Compare slsa and worldmonitor using verifiable project signals, licensing and public GitHub data.