Episode 454 - The state of open source with Brian Fox from Sonatype and Donald Fischer from Tidelift

Open Source Security

Josh and Kurt talk to Brian Fox from Sonatype and Donald Fischer from Tidelift about their recent reports as well as open source. There are really interesting connections between the two reports. The overall theme seems to be open source is huge, everywhere, and needs help. But all is no lost! There's some great ideas on what the future needs to look like.

Show Notes

• Donald Fischer
• Brian Fox
• Tidelift
• Sonatype
• The 2024 Tidelift state of the open source maintainer report
• Sonatype State of the Software Supply Chain
• Anchore 2024 Software Supply Chain Security Report
• OpenSSF TAC issue 101