Paid open-source maintainers spend more time on security
Paid open-source maintainers spend more time on security
Organizations can positively impact their own security by funding the important work of the open-source maintainers.
Paid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to implementing security practices like those included in industry standards like the OpenSSF Scorecard and the NIST Secure Software Development Framework (SSDF), according to Tidelift. Open source is the modern application development platform, with up to 98% of applications containing open-source components and open-source code making up 70% or more of the average application. … More → The post Paid open-source maintainers spend more time on security appeared first on Help Net Security.
You're viewing a single thread.
It's better to build security in than try and tape it on later...