Opensourcesecurity Domain Overview🔒 SSL Verified

Table of Contents

• ↓ Abandoned open source with Josh Marpet
• ↓ Red Hat's Project Lightwell with Mo Duffy
• ↓ Rust Foundation Maintainers Fund with Lori and Niko
• ↓ AIBOM, CBOM, and HBOM with Allan Friedman
• ↓ Packagist and Composer security with Jordi Boggiano
• ↓ Sustaining Open VSX with Mike and Thabang
• ↓ Top Alternatives to opensourcesecurity.io

6-Month Traffic Trend Estimate

Visual representation extracted from opensourcesecurity.io

Content Snippets from opensourcesecurity.io

"Josh welcomes Josh Marpet for a discussion about abandoned open source packages. Josh Marpet has a foundation called Value Chain Risk Institute that has a report discussion how to start measuring if an open source package might be abandoned. There’s a lot of data, but not a lot of groups using that data to help make informed decisions about using open source. VCRI is one of those places that’s starting to do this. ..."

"Josh welcomes Mo Duffy from Red Hat to chat about project Lightwell. The idea is to leverage the resources and understanding Red Hat has built up over the years to help deal with the deluge of vulnerability reports that are overwhelming open source projects. Mo does a really good job of explaining why this is fundamentally a people problem, not a technology problem. But it’s a people problem we can probably use technology to help. It will be interesting to see where Lightwell goes in the next few years. ..."

"Josh chats with Lori Lorusso and Niko Matsakis about the Rust Foundation Maintainers Fund. This is a new project the Rust Foundation has create to help fund Rust maintainers. It’s a great discussion where Lori and Niko cover all the ways they expect to fund the maintainers which is never as easy as one initially expects. Funding open source is a huge topic right now, it sounds like the Rust Foundation has some great ideas. ..."

"Josh chats with Allan Friedman about all things Bill of Materials. Allan did a ton of work to help turn SBOM into what it is today. He has many thoughts and ideas around the new types of BOMs, a concept he’s calling the OmniBOM. Allan is always fun to chat with and he brings a ton of knowledge and advice. Episode Links Allan’s Linkedin Dirk Gently’s Holistic SBOM Agency Allan’s AIBOM paper HBOM Cryptography Bill of Materials (CBOM) This episode is also available as a podcast, search for “Open Source Security” on your favorite podcast player. ..."

Key Topics & Focus Areas for opensourcesecurity.io:

Abandoned open source with Josh Marpet

Red Hat's Project Lightwell with Mo Duffy

Rust Foundation Maintainers Fund with Lori and Niko

AIBOM, CBOM, and HBOM with Allan Friedman

Packagist and Composer security with Jordi Boggiano

Sustaining Open VSX with Mike and Thabang