Sorry me again! I forgot to mention CSP Manager also passes the Open Source Security Foundation (OpenSSF) best practices - https://www.bestpractices.dev/en/projects/11084/passing