Get With IT

109: The Sustainability Gap in Open Source Package Registries (With Christopher Robinson)

ITOps Times Episode 109

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 11:43

Dave Rubinstein and Christopher Robinson discussed the sustainability gap in open source package registries, which poses a threat to software supply chains. Robinson highlighted the exponential rise in compute costs and security demands, exacerbated by AI and malware proliferation. The Open Source Security Foundation formed a working group to address these issues, focusing on security technologies and community challenges. Robinson emphasized the need for responsible download practices and financial support for critical registries.