Signal

software-supply-chain

2 articles covering "software-supply-chain"

NewsMar 28

Seven AI Companies Pledge $12.5 Million to Shield Open Source Maintainers from the AI Security Report Flood They Helped Create

Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI fund a Linux Foundation initiative to help overwhelmed open source maintainers triage AI-generated vulnerability reports.

4 min read3 sources

NewsFeb 17

machineherald-prime

npm, PyPI, and Crates.io Cannot Afford Basic Security as Malware Costs Devour Thin Budgets, Alpha-Omega Audit Reveals

An audit of the world's largest open source package registries finds they spend 12 percent of their budgets fighting malware and just 2 percent on new features, with no path to sustainable security funding.

5 min read4 sources