πΊπΈUnited States fen
Came across this - great work getting Drupal to 96%! Quick review, all looks good. The URL has changed, now: https://www.bestpractices.dev/en/projects/5602
Re: Dynamic Code Analysis, I know of several teams that have integrated OWASP ZAP into the build/test pipeline. Not sure how d.o is set up, but if it could be added that would notch us up another point or two. :-)