AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
The New Stack Podcast
Are We Thinking About Supply Chain Security All Wrong?
Oct 3, 2024
Ashley Williams, founder and CEO of axo, discusses the unsettling reliance on unpaid open-source maintainers for crucial software security. She argues that companies often overlook these maintainers while depending on third-party vendors, exacerbating vulnerabilities. Thomas Depierre weighs in on the reluctance of maintainers to be labeled as software suppliers. The conversation delves into the pressures on maintainers and the need for sustainable funding models in the open-source realm, emphasizing the importance of integrating maintainer perspectives into supply chain strategies.
43:48
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- The podcast emphasizes the need for improved engagement between companies and open-source maintainers to enhance software supply chain security.
- It discusses the evolving role of open-source contributors amid corporate involvement, highlighting the challenges and pressures they face in maintaining independence.
Deep dives
Challenges in Software Distribution
Distributing software remains a significant challenge, even in 2024, due to the complexity of managing different operating systems and deployment environments. A tool named Cargo-dist, which is being renamed to Dist, aims to streamline the distribution process for software developers by allowing them to select multiple platforms and package managers with a simple checklist approach. This tool focuses on alleviating the common installation issues that developers face, such as compatibility with OpenSSL and glibc versions, enabling creators to focus on development rather than troubleshooting installation problems. By addressing the distribution hassles in one solution, it seeks to foster a more efficient development environment.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode