I am surprised this did not include bitcoin core: https://www.cisa.gov/sites/default/files/2024-06/joint-guidance-exploring-memory-safety-in-critical-open-source-projects-508c.pdf 

 t-y, will research over the wknd!