4 ms·
Part of this thorough process of verification and checking open source projects is also ensuring that those critical projects are also funded appropriately to r
by andrewstuart 3y ago
Part of this thorough process of verification and checking open source projects is also ensuring that those critical projects are also funded appropriately to reflect their mission critical nature in your corporate software stack.
Oh, hang on, no that's not part of it.
- carterschonwald 3y agoYeah that’d be the dream
- dataflow 3y agoIt seems this is about helping with security, not about helping with development. (?) If anything, faster development would increases security risks instead of decreasing them, no?
- advael 3y agoMixed bag. Some would say more development is more churn is more risk, some would say that bugs are inevitable and a slow development velocity implies that vulnerabilities are unlikely to be fixed quickly. This is one of those questions we'd probably have to answer in aggregate with actual science and probably still conclude that it still goes the other way in some cases