Episode 398 - Is only 11% of open source maintained?

<p dir="auto"><a href="https://infosec.exchange/@joshbressers" rel= "nofollow">Josh</a> and <a href= "https://infosec.exchange/@kurtseifried" rel="nofollow">Kurt</a> talk about Sonatype's 9th Annual State of the Software Supply Chain. There's a ton of data in the report, but the thing we want to talk about is the statistic that only 11% of open source is actually being maintained. Do we think that's true? Does it really matter?</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href= "https://www.sonatype.com/hubfs/9th-Annual-SSSC-Report.pdf" rel= "nofollow">Sonatype report</a></li> <li><a href="https://ecosyste.ms/" rel= "nofollow">ecosyste.ms</a></li> <li><a href= "https://thehackernews.com/2023/10/libcue-library-flaw-opens-gnome-linux.html" rel="nofollow">GNOME libcue flaw</a></li> <li><a href="https://www.reality2cast.com/152" rel= "nofollow">Reality 2.0 supply chain episode</a></li> </ul>