Broadcom Pledges to Lock Down Open Source Python, Java Libraries
Broadcom is launching "TrueSource," an effort to curate and secure open-source components used with its Tanzu platform, including Spring, RabbitMQ, and libraries across Java, Python, and Node.js. "The idea is to provide a set of solutions focused on providing clean and secure artefacts," Purnima Padmanabhan, vice president of Broadcom's Tanzu Division, told The Register. "We choose and build…
Broadcom is unveiling TrueSource, a program aimed at curating and securing open-source components that power its Tanzu platform, encompassing Spring, RabbitMQ, and various libraries across Java, Python, and Node.js. Purnima Padmanabhan, Broadcom's vice president of the Tanzu Division, explained to The Register that the company meticulously selects and develops each Spring library, databases, and additional Java components.
According to The Register, Broadcom will also extend TrueSource's trusted artifacts to code not part of Spring, such as the broader Java ecosystem, Python, and Node.js. Broadcom's curation process ensures the libraries align with a reference architecture and are maintainable by the original maintainers. Thousands of Broadcom engineers daily scan, repair, contribute to, and utilize these libraries.
A VMware spokesperson revealed that Broadcom will collaborate with and support open-source maintainers, providing fixes to active projects. Broadcom maintains the role of maintainers for Spring and RabbitMQ, while for other open-source software, Broadcom will work alongside the maintainers. The spokesperson emphasized the importance of community maintainers as the source of truth, highlighting the value vendors derive from supporting software they did not create independently.
This move aligns with vendor initiatives to sustain products based on free and open-source software (FOSS).
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Broadcom pledges to lock down open source Python, Java libraries theregister.com
