The New Stack Podcast cover image

The New Stack Podcast

Are We Thinking About Supply Chain Security All Wrong?

Oct 3, 2024
Ashley Williams, founder and CEO of axo, discusses the unsettling reliance on unpaid open-source maintainers for crucial software security. She argues that companies often overlook these maintainers while depending on third-party vendors, exacerbating vulnerabilities. Thomas Depierre weighs in on the reluctance of maintainers to be labeled as software suppliers. The conversation delves into the pressures on maintainers and the need for sustainable funding models in the open-source realm, emphasizing the importance of integrating maintainer perspectives into supply chain strategies.
43:48

Podcast summary created with Snipd AI

Quick takeaways

  • The podcast emphasizes the need for improved engagement between companies and open-source maintainers to enhance software supply chain security.
  • It discusses the evolving role of open-source contributors amid corporate involvement, highlighting the challenges and pressures they face in maintaining independence.

Deep dives

Challenges in Software Distribution

Distributing software remains a significant challenge, even in 2024, due to the complexity of managing different operating systems and deployment environments. A tool named Cargo-dist, which is being renamed to Dist, aims to streamline the distribution process for software developers by allowing them to select multiple platforms and package managers with a simple checklist approach. This tool focuses on alleviating the common installation issues that developers face, such as compatibility with OpenSSL and glibc versions, enabling creators to focus on development rather than troubleshooting installation problems. By addressing the distribution hassles in one solution, it seeks to foster a more efficient development environment.

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
App store bannerPlay store banner