Episode Details

Josh and Kurt talk about a blog post that explains there isn't really an open source software supply chain. The whole idea of open source being one thing is incorrect, open source is really a lot of little things put together. A lot of companies and organizations get this wrong.

Show Notes

• Iliana's Twitter
• There is no "software supply chain"
• Google supply chain blog
• GitHub ansi_term advisory
• PyPI 2FA Dashboard
• tarfile issue rediscovered in 2022