They want: a public-private partnership to identify a list of critical open source projects Which should create: formal requirements or standards for mai

They want: a public-private partnership to identify a list of critical open source projects Which should create: formal requirements or standards for maintaining the security of that critical code. I want to see the governement barging in on any random project, dictating to the maintainers how they're going to run the thing . Even governemental funding might have too many strings attached. Our governement is providing subsidies to small local charity's. Turns out they wanted a paper trail with detailled activities for each meeting, and signatures from a lot of people. Auditors ran amock, requiring even more paper. The volunteers complained about the morass of paperwork, so the gov helped them 'professionalise'. After a year of professionalizing, it turns out they lost so much volunteers that a lot of local chapters were giving up.