Featured article
Modern Software Registries are a Trust Service
A modern software registry is increasingly a trust service. Public registries like npm and PyPI provide identity, provenance, discovery, policy, short-lived signing, and reputation. They were built as open catalogs: anyone can publish, names are first come first served, and trust is something the consumer infers after...
Videos
-
Evidence Over Certificates: John Ellis on the Eclipse Trustable Software Framework
-
From Dashboards to APIs: Day Two Operations in VCF 9.1 with Sehjung Hah
-
Dealing with the Next Bottleneck: Build Management at AI Scale with Helen Altshuler
-
“Don’t Submit Code You Don’t Understand”: Angie Byron on AI and Open Source Trust
