diff --git a/.github/scorecard.yml b/.github/scorecard.yml
new file mode 100644
index 0000000..7bc41cb
--- /dev/null
+++ b/.github/scorecard.yml
@@ -0,0 +1,17 @@
+annotations:
+  - checks:
+      - fuzzing
+    reasons:
+      - reason: not-applicable # PHP is memory safe
+  - checks:
+      - packaging
+    reasons:
+      - reason: not-supported # Using Composer
+  - checks:
+      - releases
+    reasons:
+      - reason: not-applicable # Releases are distributed via Composer
+  - checks:
+      - security-policy
+    reasons:
+      - reason: not-supported # .github/SECURITY.md not detected