TLDR · QUICK LINKS

INTRODUCING OSS REBUILD: OPEN SOURCE, REBUILT TO LAST

simonwillison.net3 min read

Summary from the TLDR newsletter

OSS Rebuild is a Google Security project aimed at providing build attestations for open source packages released through the NPM, PyPI, and Crates ecosystems.