Firms pledge increased financial support for public package registries

The OpenSSF Governing Board has called for more support from enterprises that rely heavily on public registries, saying the current funding model is no longer sustainable.In a pledge signed by organizations including GitHub, Google, IBM, Microsoft, and Sonatype, it said that package registries are facing growing operational and financial...