3 ms·
That would probably be better at providing funding for OSS. For projects that aren't backed by a company that sells support, customers could pay a third party c
by thayne 3y ago
That would probably be better at providing funding for OSS. For projects that aren't backed by a company that sells support, customers could pay a third party company like Red Hat, Canonical, Tidelift, Collabora, etc. to certify the security of dependencies.
- smarx007 3y agoIsn't Tidelift a bit of a joke? https://tidelift.com/lifter/search/npm/d3 https://tidelift.com/lifter/search/npm/d3 offers $25/mo. https://tidelift.com/lifter/search/maven/org.apache.jena:apache-jena https://tidelift.com/lifter/search/maven/org.apache.jena:apa... is not covered despite being an Apache project with 1k stars and quite a lively mailing list with some corp users.