WASHINGTON, April 15 (Reuters) - The recent attempt by an unknown actor to sabotage a widely used software program may have been one of several attempts to subvert key pieces of digital infrastructure ...

The Open Source Security Foundation (OpenSSF) and the OpenJS Foundation, which back multiple JavaScript-based open source software (OSS) projects, have warned that the attempted social engineering ...

The open-source project Babel is nearly out of cash and employees fear for their jobs, one insider said. Its plea for money sparked controversy when its creator, who no longer works there, made ...

The open source software that the vast majority of organizations include in their critical applications is vulnerable to exploitation from threat actors taking part in its creation. That's the message ...

It intersects with just about every piece of software, from systems architecture to APIs, and enterprises are adopting it more than ever. Open source software, judging by just about every estimation ...

Plenty of people have put together systems to collect, judge, and evaluate open-source projects, including information about a project's popularity, reliability, and activity. But they all have flaws.

Software supply chain quickly became a hot topic in the last few years, especially as the number of high-profile attacks increased and the White House got involved. Sigstore, an open source project ...

There isn’t nearly enough money in open source today. We can complain about venture capitalists distorting open source licensing, wring our hands about sustainability, and fret over how much ...

Developers love open source. In truth, many people outside of the professional software engineering cognoscenti are very fond of open source too, often optionally using a degree of open applications ...

Volunteer-run projects like Log4J keep the internet running. The result is unsustainable burnout, and a national security risk when they go wrong. Right now, Volkan Yazici is working 22 hour days for ...