the deps.dev API contains interesting package and repository information for a small number of ecosystems, including Scorecard data. I have an open question that likely wants clarifying around the license for the data however.