Open Source
OpenSSF's new Malicious Packages Repository is free to use in and available in OSV format.
"The major concerns are that the responsibility for compliance would fall on the wrong parties..."
"This tofu has beef with HashiCorp..." Core OpenTofu Contributor and Scalr Founder talks to The Stack at OSS Europe.
Package includes Ollama, which lets you download a range of open source LLM model packages, bundling weights, configuration and data into a single portable file
Multinational's Global CISO touts critical work being done by the OpenSSF and tools like its Security Scorecard...
Strikingly, only 11% of open source projects are ‘actively maintained'. Should you be worried? Well, probably, yes.
Do you, or do you not, need to get your knickers in a twist? Well, that depends on your risk tolerance..