2026-10-22 13:00 UTC
(5/5)
🏛️ Governments must recognise that the Open Source they depend on is underfunded for the wave of AI-discovered vulnerabilities it faces. The EU's CRA partially addresses this by making companies more responsible; its Open Source Software Stewards & Voluntary Security Attestations should channel funding from corporate and government users to the projects themselves.
Replies (1)
-
@jmaris@eupolicy.social 2026-10-22 13:04
Bonus thought: This comment on the #PHP blog alleges that Chainguard, the organisation who broke embargo and leaked the patch early, is currently using this to try to expand their customer base. If these allegations are true, it's difficult to say how #Chainguard should still be allowed access to pre-disclosure information. If this happens again, the whole responsible disclosure system is at risk of collapse.