CISA PRINCIPLES FOR PACKAGE REPOSITORY SECURITY

Summary from the TLDR InfoSec newsletter

The CISA has laid out key actions for securing open source software.