"A sophisticated malware attack on Free and Open Source Software can be disastrous for developers, users, companies & countries", says Philippe Ombredanne.

His project FOSS Code Supply Chain Assurance improves the security of FOSS packages.

"The project scans code to observe and recognize distinguishing features, and then matches the code against databases of those features to identify outliers or red flags."

Read the entire interview here: nlnet.nl/project/FOSS-supplych…

#FOSS #security #NGI0