The US Cybersecurity and Infrastructure Security Agency (CISA) and the Open Source Security Foundation (OpenSSF) have released a framework aimed at enhancing the security of package repositories in open source software ecosystems.
View full story…