Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Thomas Depierre (di4na@hachyderm.io)'s status on Monday, 02-Jan-2023 00:25:17 JST Thomas Depierre

As a maintainer of OpenSource libraries and packages, there is something that kept feeling off in the whole Software Supply Chain discourse. I think this comes down to something simple.
I am not a Supplier.
You can read more explanation there https://www.softwaremaxims.com/blog/not-a-supplier
#opensource
In conversation Monday, 02-Jan-2023 00:25:17 JST from hachyderm.io permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  I am not a supplier
  
  from @Thomas Depierre
  
  For the past few years, we have seen a lot of discussions around the concept of the Software Supply Chain. These discussions started around the time of LeftPad and escalated with multiple incidents in the past few years. The problem of all the work in this domain is that it forgets a fundamental point.

Feeds