Re:'Securing Open Source Software Act' introduced to US Senate
by Too on Saturday September 24, 2022 @01:04AM
(#32959858)
That’s assuming these individuals aim to make profit for their entity. The risk raised above was corruption, with tax paid development cost going to their uncles company, with a big fat kickback under the table.
[ Parent
| on HN ]
Re:'Securing Open Source Software Act' introduced to US Senate
by kube-system on Saturday September 24, 2022 @01:18AM
(#32959905)
Dependency management is a real security concern. There’s no corruption there.
The root comment suggested that somehow this was a smear on FOSS, intended to sell more proprietary software. However, this doesn’t hold up, because FOSS components are widely used by all of the big proprietary software vendors in this space too.