OpenSSF and CISA partner on Principles for Package Repository Security
The OpenSSF is releasing a new framework that can be used to assess the security capabilities of package repositories and help plan for future improvements. FOCUS KEYPHRASE: Principles for Package Repository Security.
Source: sdtimes.com