5 stories tagged software-supply-chain, newest first.
81 points by dxs | 35 comments
Linux Stans news article reporting that 11 of 23 core open source projects are maintained by just one or two people, citing the tz database maintained by Paul Eggert.
107 points by simjue | 40 comments
A data-visualization story from sheets.works counting how few maintainers look after the code that billions of phones depend on, measured from the code itself.
421 points by dhruv3006 | 203 comments
An open letter announcing Akrites, a Linux Foundation project coordinating efforts to remediate vulnerabilities in widely used open source software.
325 points by LawnGnome | 132 comments
Blog post by Josh Bressers on Open Source Security arguing that many open source projects are maintained by a single person.
337 points by lorey | 73 comments
Blog post by Konstantin Vinogradov describing how he used GitHub Sponsors and PyPI data to algorithmically donate over $5000 to open source maintainers.