OpenSSF and CISA partner on Principles for Package Repository Security

The OpenSSF is releasing a new framework that can be used to assess the security capabilities of package repositories and help plan for future improvements.  Called the Principles for Package Repository Security, the framework was a collaborative effort between OpenSSF’s Security Software Repositories Working Group and CISA. CISA published the Open Source Software Security Roadmap … appeared first on SD Times.