Seth Michael Larson

I've noticed a concerning trend of "slop security reports" being sent to open source projects. Here are thoughts about what platforms, reporters, and maintainers can do to push back:

#oss #opensource #security

https://sethmlarson.dev/slop-security-reports?utm_campaign=mastodon

Sentry putting their money where their mouth is, and a teaser for @ecosystems and @opencollective cross-over project too? This is awesome!

https://blog.sentry.io/we-just-gave-750-000-dollars-to-open-source-maintainers/

@pypi now requires #2FA for new user registrations in order to publish or create new projects. This is part of a broader effort to require 2FA for all users of #PyPI by the end of 2023.

#Python #Security #Opensource

https://blog.pypi.org/posts/2023-08-08-2fa-enforcement-for-new-users/