The Answer Was Already on the Shelf

How public money built defenses for open source software (way) before the law required them.

The second installment of our article series on digital autonomy looks into open source software supply chain management. Author Jeffrey A. McGuire talks to Armijn Hemel of o.a. DeviceCode and Philippe Ombredanne of o.a. the Free Software Vulnerability Database. They both have a long track record of building tools to improve FOSS supply chain management and are part of the CodeSupply project. Read The Answer Was Already on the Shelf on the Linux Magazine website, download the PDF, or start with the excerpt below.

Together with Linux Magazine NLnet is publishing a five-part article series on how public funding of open source contributes to digital autonomy. Each article, written by Jeffrey A.…