AWS, Google, OpenAI and a dozen more pledge to “defend open source.” The maintainers aren't sold (akrites.org)
The pitch is a single confidential reporting channel, a security response team, real funding, and “maintainer of last resort” coverage for abandoned packages. The signatories include AWS, Anthropic, Google, Microsoft, OpenAI, JPMorgan and IBM.
That roster is exactly the problem for readers: a project that “favors centralization and corporate circles” signed by the companies many blame for the strain on open source — and which employs no engineers of its own to do the fixing.
Sign in to save