Sponsor of the Day:
Jerkmate
https://www.linuxfoundation.org/press/press-release/linux-foundation-openssf-gather-industry-government-leaders-open-source-software-security-summit
The Linux Foundation and Open Source Software Security Foundation (OpenSSF) Gather Industry and...
Sep 13, 2022 - The Linux Foundation and the Open Source Software Security Foundation (OpenSSF) brought together over 90 executives from 37 companies and government leaders...
open source softwarelinux foundationsecurityopenssfgather
https://www.linuxfoundation.org/research/maintainer-perspectives-on-security?hsLang=en
Maintainer Perspectives on Open Source Software Security
Maintainer Perspectives on Open Source Software Security
open source softwaremaintainerperspectivessecurity
https://openuk.uk/security/
Summer of Open Source Software Security - OpenUK
Nov 1, 2022 - » Read more about: Summer of Open Source Software Security »
open source softwaresummersecurityopenuk
https://safedep.io/bitwarden-cli-supply-chain-compromise/
Bitwarden CLI Supply Chain Compromise - Real-time Open Source Software Supply Chain Security
A technical writeup of the malicious `@bitwarden/cli@2026.4.0` release linked to the Checkmarx campaign. Covers the poisoned publish path, loader changes,...
supply chain compromisereal time opensource software securitybitwarden cli
https://www.linux.com/news/open-source-software-security-turning-sand-into-concrete/
Open Source Software Security: Turning Sand into Concrete - Linux.com
Jul 18, 2024 - Last week I had the privilege of participating in the Open Source Software Security Summit II in Washington, DC. The Linux Foundation and OpenSSF gathered...
open source softwaresecurityturningsandconcrete
https://libraries.io/conda
conda - Libraries.io - security & maintenance data for open source software
A detailed listing of the most popular, recently updated and most watched conda packages online
libraries io securityopen source softwaremaintenance dataconda
https://openssf.org/training/courses/
Free Course: Developing Secure Software (LFD121) – Open Source Security Foundation
developing secure softwareopen source securityfree courselfd121foundation
https://libraries.io/
Libraries.io - security & maintenance data for open source software
Discover open source packages, modules and frameworks you can use in your code.
libraries io securityopen source softwaremaintenance data
https://opensourcesecuritypodcast.libsyn.com/2026-state-of-the-software-supply-chain-with-brian-fox
Open Source Security: 2026 State of the Software Supply Chain with Brian Fox
Josh chats with Brian Fox from Sonatype about their 2026 State of the Software Supply Chain report. Most of the number continue to grow at alarming rates, but...
open source securitysoftware supply chain2026 statebrianfox
https://libraries.io/platforms
Platforms - Libraries.io - security & maintenance data for open source software
All the open source platforms that packages have been published to
libraries io securityopen source softwaremaintenance dataplatforms
https://www.harness.io:443/resources/software-supply-chain-security-more-than-open-source
Software Supply Chain Security: More Than Open Source
In this OnDemand session, you'll discover why addressing open source vulnerabilities is just the first step in securing your software supply chain. We'll...
software supply chainopen sourcesecurity
https://libraries.io/languages
Languages - Libraries.io - security & maintenance data for open source software
All the programming languages that packages have been written in.
libraries io securityopen source softwaremaintenance datalanguages
https://www.securitynewspaper.com/2025/07/23/how-to-use-googles-oss-rebuild-a-new-open-source-software-supply-chain-security-tool/
How to Use Google’s OSS Rebuild: A New Open Source Software Supply Chain Security Tool –...
new open sourcesoftware supply chainsecurity tooluseoss
https://app.safedep.io/auth
SafeDep | Open Source Software Supply Chain Security Platform
Welcome to SafeDep. Onboard to SafeDep cloud, generate authentication credentials and access platform APIs
open source softwaresupply chain securitysafedepplatform
https://libraries.io/npm/typescript
typescript 6.0.3 on npm - Libraries.io - security & maintenance data for open source software
TypeScript is a language for application scale JavaScript development - 6.0.3 - a TypeScript package on npm
typescript 6 0npm libraries iosecurity maintenance dataopen source software3
https://securitylab.github.com/
GitHub Security Lab | Securing open source software, together.
Securing open source software, together.
securing open sourcegithub securitylabsoftwaretogether
https://3mdeb.com/open-source-software/
Open Source Software | Enhanced software performance and security.
open source softwareenhanced performancesecurity
https://openssf.org/soss-vision-brief/
Secure Open Source Software Vision Brief 2023 – Open Source Security Foundation
secure open sourcesoftware visionsecurity foundationbrief2023
https://libraries.io/npm/byo-skill
byo-skill 0.2.0 on npm - Libraries.io - security & maintenance data for open source software
Agent Skill (agentskills.io spec) teaching Cursor / Claude Code / Codex / Copilot / Goose / any SKILL.md-aware AI how to integrate BYO (bring-your-own-keys) ...
npm libraries iosecurity maintenance dataopen source software0 2byo
https://libraries.io/pypi/pandas/3.0.1
pandas 3.0.1 on PyPI - Libraries.io - security & maintenance data for open source software
Powerful data structures for data analysis, time series, and statistics - 3.0.1 - a Python package on PyPI
pandas 3 0pypi libraries iosecurity maintenance dataopen source software1