<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=705633339897683&amp;ev=PageView&amp;noscript=1">

Featured

Recap: Life as an open source maintainer after xz

It’s been six weeks since a developer uncovered a hack of epic scope in the popular Linux compression library called xz utils (previously known as ...
Amy Hays
by Amy Hays
on May 15, 2024

Upstream rewind: the 2023 keynote, the accidental supply chain, and what it means today

By Caitlin Bixby on April 30, 2024
As we count down to this year’s Upstream, we’ll be looking back at Upstream moments from years past. Discover how topics may have changed and how ...

New report from Atlantic Council finds paying maintainers can positively impact open source security

By Lauren Hanford on April 23, 2024
A new report just out last week from the Digital Forensic Research Lab (DFRLab) at the Atlantic Council found that open source projects with funding ...

The ROI of paying open source maintainers (in light of the xz utils backdoor)

By Lauren Hanford on April 8, 2024
As we continue to watch the attempted xz utils backdoor hack unfold, I’ve been following several conversations where questions are being raised about ...

Recap: 10 critical things to know before depending on an open source project

By Caitlin Bixby on December 19, 2023
It’s no secret that open source software is powering modern application development. In our own surveys, we’ve found that more than 90% of ...

How organizations use Tidelift open source intelligence to proactively improve supply chain health and security

By Bill Nottingham on December 18, 2023
Today we’re going to go through how leading customers integrate Tidelift’s validated open source intelligence into their tools and processes, in ...

Tidelift CEO and co-founder Donald Fischer talks cybersecurity requirements for organizations selling software to the U.S. government

By Caitlin Bixby on August 31, 2023
In response to an increase in cybersecurity attacks, from the SolarWinds hack on proprietary software to the Log4Shell incident on the open source ...

Upstream recap: Leveraging InnerSource practices to drive external OSS solutions

By Caitlin Bixby on August 10, 2023
On June 7th, for the third year in a row, we hosted Upstream, a virtual, one-day celebration of open source, the developers who use it, and the ...

Tidelift CEO & co-founder Donald Fischer discusses government requirements and the impact on DevSecOps

By Caitlin Bixby on June 29, 2023
Yesterday, Tidelift CEO and co-founder Donald Fischer sat down with Techstrong TV’s Michael Vizard to discuss the latest government requirements and ...

Upstream recap: Open source won, now comes the hard part

By Caitlin Bixby on June 28, 2023
On June 7th, for the third year in a row, we hosted Upstream, a virtual, one-day celebration of open source, the developers who use it, and the ...

Don't miss the latest from Tidelift

Filter by Topic