Best Practices WG 2024 Q4 TAC follow-ups

[justaugustus]

We talked about this at the Scorecard / Allstar meeting yesterday, but the top community questions I get about the Scorecard project are:

• Is Scorecard for maintainers to better understand their security journey or for consumers to make informed risk decisions? Each of those areas have different prioritization of improvements to Scorecard, and I'm worried we'll be spread quite thin if we say "both!"
• What's the primary way we want people to interact with Scorecard? This will likely be informed by the above item about audience. The web viewer is a great introduction to Scorecard, and of course there's also the CLI.
• Once the above items have been decided, it would be great to update the Scorecard website to have more clarity on who it's for and how to get started (for example it doesn't mention the web viewer today)

Originally posted by @steiza in ossf/tac#423 (comment)