; and (ii) develop 1 or more ranked lists of components described in clause (i) based on the assessment, such as ranked by the criticality, level of risk, or usage of the components, or a combination thereof. (F) Automation The Director shall, to the greatest extent practicable, automate the assessment conducted under subparagraph (E). (G) Publication The Director shall publicly publish and maintain any tools developed to conduct the assessment described in subparagraph (E) as open source software. (H) Sharing (i) Results The Director shall facilitate the sharing of the results of the each assessment described in subparagraph (E) (i) with appropriate Federal and non-Federal entities working to support the security of open source software, including by offering means for appropriate Federal and non-Federal entities to download the assessment in an automated manner. (ii) Datasets The Director may publicly publish, as appropriate, any datasets or versions of the datasets developed or consolidated as a result of the an assessment described in subparagraph (E) (i) . (I) Critical infrastructure assessment study and pilot (i) Study Not later than 2 years after the publication of the framework described in subparagraph (A), the Director shall conduct a study regarding the feasibility of the Director conducting the assessment described in subparagraph (E) for critical infrastructure entities. (ii) Pilot (I) In general If the Director determines that the assessment described in clause (i) is feasible, the Director may conduct a pilot assessment on a voluntary basis with 1 or more critical infrastructure sectors, in coordination with the Sector Risk Management Agency and the sector coordinating council of each participating sector. (II) Termination If the Director proceeds with the pilot described in clause (ii) subclause (I) , the pilot shall terminate on the date that is 2 years after the date on which the Director begins the pilot. (iii) Reports (I) Study Not later than 180 days after the date on which the Director