Open infrastructure isn't free. 🌱
Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.
#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability
Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.
#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability
Open Infrastructure Is Not Free Part II
10 trillion open source package downloads in 2026. Still running on donations and volunteers.
AI is accelerating attacks. The Sustaining Package Registries WG is here to help.
openssf.org/blog/2026/05...
#PreserveOpenSource
10 trillion open source package downloads in 2026. Still running on donations and volunteers.
AI is accelerating attacks. The Sustaining Package Registries WG is here to help.
openssf.org/blog/2026/05...
#PreserveOpenSource
May 6, 2026 at 12:39 PM
Open infrastructure isn't free. 🌱
Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.
#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability
Packagist/Composer signed a joint @openssf.org letter with PyPI, crates, Maven, CPAN, etc on real cost of running package registries.
#php #phpc #composerphp #softwaresupplychain #PreserveOpenSource #FreeSoftwareIsntFree #OpenSource #Sustainability