SiliconANGLE

New repository aims to illuminate open-source package vulnerabilities and malicious code

The Open Source Security Foundation today launched its Malicious Packages Repository, an open-source system for collecting and publishing cross-ecosystem reports of malicious packages. Claimed to be ...

Nord VPN ups its game in open-source, with Linux-based package for OpenWrt routers

The headless package is available on GitHub, promoting transparency across the open-source community. Here's all you need to ...
MUO on MSN

I replaced the Microsoft Store with this powerful open-source package manager

For me, UniGetUI is not just a replacement for the Microsoft Store. It has completely changed the way I find new software and ...
VentureBeat

Openbase wants to be the Yelp for open source software packages

Open source has eaten the world, evidenced by the myriad major deals that have gone down in open source town in recent times. In 2018, IBM snapped up enterprise-focused open source software maker Red ...
TechCrunch

The current and future state of open source security: research from Snyk and the Linux Foundation

Open source software is everywhere. Open source packages are used to build mobile apps, ecommerce platforms, artificial intelligence, electric cars, streaming services… you name it. Current estimates ...
Business Wire

Tidelift Introduces Advanced Open Source Intelligence Capabilities To Improve Software Supply Chain Security in Partnership with Maintainers

BOSTON--(BUSINESS WIRE)--Tidelift, a provider of solutions for improving the security and resilience of the open source software supply chain powering modern applications, today announced a broad new ...
SD Times

OpenSSF launches Malicious Packages repository to track reports of compromised open source packages

Value stream management involves people in the organization to examine workflows and other processes to ensure they are deriving the maximum value from their efforts while eliminating waste — of ...
Bleeping Computer

Open source 'Package Analysis' tool finds malicious npm, PyPI packages

The Open Source Security Foundation (OpenSSF), a Linux Foundation-backed initiative has released its first prototype version of the 'Package Analysis' tool that aims to catch and counter malicious ...
SiliconANGLE

Google Cloud beefs up open-source software security with Assured OSS packages

Google Cloud wants to help improve the security of the most widely used open-source software, and to do so it’s making its Assured Open Source Software service generally available for Java and Python ...
InfoWorld

Harvard census identifies most commonly used open source packages

Researchers at the Laboratory for Innovation Science at Harvard University (LISH) have published the most comprehensive census of free and open source (FOSS) software packages to date, with the aim of ...
PC World

10 Reasons Open Source Is Good for Business

With the many business and government organizations that now use open source software such as Linux, it’s becoming increasingly clear that price is not the only advantage such software holds. If it ...