Open source registries don’t have enough money to implement basic security
Open source registries don’t have enough money to implement basic security Summary At FOSDEM, Michael Winser of Alpha‑Omega warned that major open source registries (PyPI, npm, Crates.io, RubyGems, Maven Central)…
