Eric Geller @ericgeller
"There's now a lot more scrutiny" of OSS, David Wheeler, director of open source supply chain security at the Linux Foundation, told me. The Linux Foundation runs @theopenssf, which offers resources like SLSA, Sigstore, vuln disclosure guidance, and automated scorecards. — PolitiTweet.org