Posts from The Open Source Security Foundation (OpenSSF) is a members | The fastest way for busy developers to keep up with technologies 🚀

Updates from The Open Source Security Foundation (OpenSSF) is a...

Posts
Description

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Is Java Still Used? Current Trends and Market Demand in 2025

Java’s not just hanging on in 2025—it’s running the show. Over 90% of the Fortune 500 still trust it to power cloud platforms, big data pipelines, and IoT sprawl. What’s keeping it sharp? A brisk six-month release cadence. A battle-hardened ecosystem through OpenJDK and Jakarta EE. And a JVM that k.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Esoteric Languages Challenge Coders to Think Way Outside the Box

Daniel Temkin has written a book about44 esoteric programming languages, including Valence, which uses ancient Greek measuring symbols. Temkin emphasizes the significance of esoteric languages in promoting creativity and investigating the complicated nature of modern programming. These languages hav.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Developer Experience at Pinterest: The Journey to PinConsole

Pinterest rolled outPinConsole, a custom-built Internal Developer Platform powered byBackstage. Years of scattered tools had piled on complexity. This is their clean slate. PinConsole pulls developer workflows into one place, plugging intoPinCompute (Kubernetes),GitHub,Jira, andPagerDuty. It also b.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

The Ultimate Sprint Retro: My 10 Years of Software Engineering

A decade in the trenches took one engineer from writing clean code to navigating company chaos—eventually landing in engineering management. The big shift? Less about scaling systems, more about scaling humans. What started with system design and production code morphed into leading teams, syncing .. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

The Raku Programming Language: There's More Than One Way To Do It

Raku throws togethermulti-paradigm support,gradual typing,first-class regex grammars, andmetaprogrammingthat actually earns the name. It comes with built-in concurrency,multiple dispatch, and fresh tools likeRakuASTfor syntax-aware code wrangling... read more

Story

@laura_garcia shared a post, 6 months, 2 weeks ago

Software Developer, RELIANOID

The Importance of Reliability in Airport Systems

✈️ In aviation, reliability isn’t optional—it’s mission-critical. From flight scheduling to baggage handling, every system must perform flawlessly to keep passengers moving. Our latest blog explores how Navitaire by Collins Aerospace is transforming airport operations and how RELIANOID helps ensure ..

Story

@laura_garcia shared a post, 6 months, 2 weeks ago

Software Developer, RELIANOID

The Importance of Reliability in Airport Systems

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Cursor looks into selling your data for AI training

Anysphere—the team behind Cursor, the AI coding sidekick—is looking to license user behavior data to the big model labs: OpenAI, Anthropic, and the usual suspects. Why? Training costs are brutal, and this could ease the burn. Strategic Implication:Selling real developer telemetry to model competito.. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

OpenAI eats jobs, then offers to help you find a new one

OpenAI just fired a shot across LinkedIn’s bow. Its new jobs platform—part ofOpenAI Academy—aims to certify AI skills, then plug users directly into hiring pipelines. Walmart's already on board. Market signal:OpenAI’s not just training people anymore. It's moving in on talent placement, pulling the .. read more

Link

@faun shared a link, 6 months, 2 weeks ago

FAUN.dev()

Building Etsy Buyer Profiles with LLMs

Every day, nearly 90M buyers look for unique items out of over 100 million listings on the Etsy. The platform uses large language models to create detailed buyer profiles anonymously capturing their interests. Adjustments in data retrieval and processing have reduced the time and cost of generating .. read more

The Open Source Security Foundation (OpenSSF) is an industry-backed foundation focused on strengthening the security of the global open source software ecosystem. It brings together major technology companies, cloud providers, open source communities, and security experts to address systemic security challenges that affect how software is built, distributed, and consumed.

OpenSSF was launched in 2021 and operates under the Linux Foundation, combining efforts from earlier initiatives such as the Core Infrastructure Initiative (CII) and industry-led supply chain security programs. Its mission is to make open source software more trustworthy, resilient, and secure by default, without placing unrealistic burdens on maintainers.

The foundation works across several key areas:

- Supply chain security: Developing frameworks, best practices, and tools to secure the software lifecycle from source to deployment. This includes stewardship of projects like sigstore and leadership on SLSA (Supply-chain Levels for Software Artifacts).

- Security tooling: Supporting and incubating open source tools that help developers detect, prevent, and remediate vulnerabilities at scale.

- Vulnerability management: Improving how vulnerabilities are discovered, disclosed, scored, and fixed across open source projects.

- Education and best practices: Publishing guidance, training, and maturity models such as the OpenSSF Best Practices Badge Program, which helps projects assess and improve their security posture.

- Metrics and research: Advancing data-driven approaches to understanding open source security risks and ecosystem health.

OpenSSF operates through working groups and special interest groups (SIGs) that focus on specific problem areas like securing builds, improving dependency management, or automating provenance generation. This structure allows practitioners to collaborate on concrete, actionable solutions rather than high-level policy alone.

By aligning maintainers, enterprises, and security teams, OpenSSF plays a central role in reducing large-scale risks such as dependency confusion, compromised build systems, and malicious package injection. Its work underpins many modern DevSecOps and cloud-native security practices and is increasingly referenced by governments and enterprises as a baseline for secure software development.

We believe organizations are best managed by their official representatives. Claim this page if you are the administrator of The Open Source Security Foundation (OpenSSF) is a.

Claim this page