OpenSSF and CISA partner on Principles for Package Repository Security
The OpenSSF is releasing a new framework that can be used to assess the security capabilities of package repositories and help plan for future improvements. FOCUS KEYPHRASE: Principles for Package Repository Security.
Zach Steindler Jack Cable Openssf Security Software Repositories Working Group Package Repository Security Software Repositories Working Group Open Source Software Security Roadmap
Source: sdtimes.com