Broadcom pledges to lock down open source Python, Java libraries
Promises ‘secure artifacts’ for Spring and RabbitMQ, and other projects that matter to its Tanzu suite
Broadcom has pledged to ensure the security of popular open-source software libraries, including those used in the Spring Java application framework and RabbitMQ messaging system. The company's new TrueSource offering, introduced ahead of VMware's annual Explore conference, aims to provide clean and secure artifacts. Broadcom, which acquired SpringSource and operates a Tanzu division, will take responsibility for identifying key components relied upon by Spring users and ensure their security.
The company's curation process involves scanning, fixing, contributing to, and consuming thousands of open-source components daily. While Broadcom will work with and support Spring and RabbitMQ maintainers, the company also plans to extend its TrueSource trusted artifacts to other open-source software, including Python and Node.js.
Broadcom emphasizes that the community maintainers should remain the source of truth for these projects.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Broadcom pledges to lock down open source Python, Java libraries theregister.com
- Broadcom Pledges to Lock Down Open Source Python, Java Libraries it.slashdot.org
