Post #1434874
2023-01-01 11:26 UTC
@Di4na @foosel I’d argue that it is not sufficient to also provide your software with a well known FOSS license. That also means that you are now a “un-supplier" to others, it does not fix the need for owing back to your FOSS dependencies, specially if you are a large project.
Replies (1)
-
@Di4na@hachyderm.io 2023-01-01 19:50
@juandesant @foosel I would agree, but note that here I am not talking about this, I am talking of the push to "make secure" the supply chain, by asking the maintainers to use 2FA, make their build reproducible, etc. Some of this come not from the users but straight from government