project-security

Following a recent incident where a malicious individual infiltrated project XZ by posing as a developer to gain the trust of project administrators and submit malicious code, OpenSSF and OpenJS...