Curate a list of high value security-focused learning resources for the JS community

[joesepi]

Can we curate a list of resources that will be evergreen and high value for our community?

I'm thinking of things primarily from OpenSSF foundation but others would be welcome as well.

Here is an example:

• https://github.com/ossf/package-manager-best-practices/blob/main/published/npm.md#readme