Abandoned open source with Josh Marpet

Open Source Security Podcast by Open Source Security Podcast

Jul 20, 202634:16Technology

Josh welcomes Josh Marpet for a discussion about abandoned open source packages. Josh Marpet has a foundation called Value Chain Risk Institute that has a report discussion how to start measuring if an open source packag...

Related Episodes

Continue listening to more episodes from Open Source Security Podcast.

Sovereignty, policy, and OpenUK with Amanda Brock

Sep 28, 2026 - 34:44

Josh welcomes Amanda Brock from OpenUK to chat about sovereignty, policy, open source, and a whole host o...

The curl summer of Bliss with Daniel and Stefan

Sep 21, 2026 - 33:26

Josh chats with Daniel and Stefan from curl about their summer of bliss. Curl stopped taking vulnerabilit...

CRA vulnerability reporting with Daniel Thompson

Sep 14, 2026 - 40:40

Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and th...

Finding difficult vulnerabilities with Jaya Baloo from AISLE

Sep 7, 2026 - 29:13

Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulner...

Sovereign Tech Agency with Erik Möller

Aug 31, 2026 - 36:17

Josh chats with Erik Möller from the Sovereign Tech Agency about what they're doing. The Sovereign Tech A...

CVEs vs Advisories with Paul Asadoorian

Aug 24, 2026 - 38:07

Josh chats with Paul Asadoorian about a tool he wrote called fettle and a recent report Paul published on...

Maintaining EOL Open Source with Commonhaus and HeroDevs

Aug 17, 2026 - 34:24

Josh chats with Erin Schnabel and Rob Nalen about a new effort from Commonhaus and HeroDevs for maintaini...

Cleanup, Speedup, Levelup open source at e18e

Aug 10, 2026 - 35:08

Josh chats with James from e18e. This is a project that is working on improving Javascript packages by cl...