3 ms·

The security policy was also updated: https://github.com/tukaani-project/xz/commit/780d2c236de0e4749655696c2e0c26fb7565afd3 https://github.com/tukaani-project/x

• throwiforgtnlzy 2y ago
  Maybe we need an international NGO/co-op to provide essential services for small, essential FOSS projects such as security comms, security audits, build infrastructure, testing, best practices, background investigations, and so forth. The "one guy's little piece of code holding up the world" is a SPOF and much easier to attack than if they had some help and automation.
  • zoobab 2y ago
    "security comms, security audits, build infrastructure, testing, best practices, background investigations, and so forth." Typical over-engineering that comes from large corporations. They will turn FOSS into a walled garden, as if contributing to projects was not a pain already.
    • mschuster91 2y ago
      > They will turn FOSS into a walled garden, as if contributing to projects was not a pain already. The only thing in here that has potential negative impact are the background investigations, but it might be reasonable to have an independent third party that offers this as a service for project leads.