Drupal.org vs Shields

Drupal.org exposes its community project and node data through a legacy Drupal 7 REST endpoint (`drupal.org/api-d7/node.json`); a live unauthenticated GET returned a 200 JSON body with `Access-Control-Allow-Origin: *`, resolving cors "unknown" to "yes". It's a free community resource run by the nonprofit Drupal Association, with no authentication or paid tier for reading published project data.

Shields.io serves status badges as SVG by default from `img.shields.io`, with `.png` requests 301-redirected to a raster-conversion host and a `.json` suffix returning the same badge's label/value/color as plain JSON — all three confirmed live. A live unauthenticated GET returned `Access-Control-Allow-Origin: *` on every format, resolving cors "unknown" to "yes". Free, open-source, and keyless, funded by sponsorships rather than a paid tier.