Can We Trust CVE? (opensourcesecurity.io)

Screenshot of opensourcesecurity.io: Can We Trust CVE?

First screen, captured 1 year ago.

Looks similar

Screenshot of opensourcesecurity.io: Open Source is one person

Open Source is one person (opensourcesecurity.io)

325 points by LawnGnome 1 year ago | 132 comments

Blog post by Josh Bressers on Open Source Security arguing that many open source projects are maintained by a single person.

open-source-maintainers software-supply-chain open-source-sustainability josh-bressers

Screenshot of astral.sh: Open source security at Astral

Open source security at Astral (astral.sh)

344 points by vinhnx 6 months ago | 95 comments

Astral blog post by William Woodruff describing the techniques Astral uses to secure its open source tools and their build, test, and release processes against supply chain attacks.

supply-chain-security astral ci-cd open-source

Screenshot of rietta.com: RubyGems Open Source Supply Chain Security and OpenAI

RubyGems Open Source Supply Chain Security and OpenAI (rietta.com)

33 points by rietta 1 month ago | 4 comments

Screenshot of berthub.eu: EU Cyber Resilience Act: What does it mean for open source?

EU Cyber Resilience Act: What does it mean for open source?(berthub.eu)

119 points by ahubert 2 years ago | 62 comments

Screenshot of canva.dev: When URL parsers disagree

When URL parsers disagree (canva.dev)

131 points by hannob 3 years ago | 42 comments

Screenshot of opensourcewatch.beehiiv.com: Now it's PostgreSQL's turn to have a bogus CVE

Now it's PostgreSQL's turn to have a bogus CVE (opensourcewatch.beehiiv.com)

151 points by elorant 3 years ago | 80 comments

Looks similar

Open Source is one person(opensourcesecurity.io)

Open source security at Astral(astral.sh)

RubyGems Open Source Supply Chain Security and OpenAI(rietta.com)