Technology
Broadcom launches TrueSource initiative to secure open-source libraries
The company's Tanzu Division aims to curate, scan, and secure components across Java, Python, and Node.js environments.
The short version
- Broadcom is launching TrueSource, an effort to curate and secure open-source software components used with its Tanzu platform.
- The initiative covers Spring and RabbitMQ, alongside broader ecosystem libraries for Java, Python, and Node.js.
- Broadcom stated it will collaborate with community maintainers and submit upstream fixes for active open-source projects.
Key facts
- Broadcom is launching an initiative named TrueSource to curate and secure open-source software components used with its Tanzu platform.[Slashdot]
- The initiative encompasses Spring, RabbitMQ, and libraries across Java, Python, and Node.js ecosystems.[Slashdot]
- Purnima Padmanabhan, vice president of Broadcom's Tanzu Division, said the effort aims to provide clean and secure code artifacts.[Slashdot]
- A VMware spokesperson stated that Broadcom will maintain community maintainers as the source of truth and contribute fixes upstream to active projects.[Slashdot]