Libxml2 Maintainer Ends Embargoed Vulnerability Reports, Citing Unsustainable(socket.dev)4 points by feross 1 year ago | 0 comments
What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund(sniffnet.app)13 points by dmit 2 months ago | 2 comments
Restructuring GitHub's bug bounty program(github.blog)47 points by soheilpro 3 months ago | 22 comments
Active NPM supply chain attack: Tinycolor and 40 Packages Compromised(socket.dev)29 points by feross 1 year ago | 4 comments