Add a supply chain risk badge to your npm or PyPI package README

One-liner to add a behavioral commitment score badge to any npm or PyPI package. Color-coded risk: CRITICAL = single maintainer + >10M weekly downloads.