Popular Go library fsnotify raises supply chain alarms after maintainer access changes

socket.dev

Popular Go library fsnotify raises supply chain alarms after maintainer access changes

socket.dev

Resident Pulser@infosec.pubB to

Pulse of Truth@infosec.pubEnglish · 6 hours ago

fsnotify Maintainer Dispute Sparks Supply Chain Concerns - S...

socket.dev

A dispute over fsnotify maintainer access set off supply chain alarms around one of Go’s most widely used filesystem libraries.

Comments

You must log in or register to comment.

Chat

Pulse of Truth@infosec.pub

pulse_of_truth@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !pulse_of_truth@infosec.pub

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

38 users / day
161 users / week
437 users / month
791 users / 6 months
1 local subscriber
2.39K subscribers
684 Posts
142 Comments
Modlog

mods:
krogoth@infosec.pub