Trust as a service for validating OSS dependencies
Show notes
ICYMI, listen to part one of this conversation. Craig is the cofounder and CEO of Stacklok, which helps developers and open-source communities build safer software, secure the supply chain, and choose safer dependencies. Stacklok’s free-to-use service, Trusty, employs a statistical analysis of author/repo activity and a package’s source of origin to assess its trustworthiness. Craig cofounded the Kubernetes project, an open-source system for automating deployment, scaling, and management of containerized applications. Craig is on LinkedIn. Stack Overflow user mprivat earned a well-deserved Lifeboat badge by answering Abstract class extending concrete classes. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Guests
Analysis: done · source seed