Brian Fox

CTO and co-founder of Sonatype, with long-standing involvement in open source (notably the Maven project) and participation on boards such as OpenSSF and Finos; focuses on software supply chain security and open source infrastructure sustainability.

Best podcasts with Brian Fox

Ranked by the Snipd community

Sep 29, 2025 • 42min

The Hidden Vulnerability of The Open Source Software Supply Chain: The Underlying Infrastructure

Brian Fox, CTO and co-founder of Sonatype and a key figure in open-source projects like Maven, dives into the implications of the EU Cyber Resilience Act. He discusses the hidden risks it poses to open-source maintainers, highlighting potential legal liabilities and sustainability challenges for registries. Fox reveals how major cloud providers account for much of Maven Central's traffic and suggests innovative solutions like repository managers and cost-structures to tackle inefficiencies in software consumption. His insights are critical for navigating today’s complex software landscape.

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app