Abandoned open source with Josh Marpet

Open Source Security Podcast by Open Source Security Podcast

Jul 20, 202634:16Technology

Josh welcomes Josh Marpet for a discussion about abandoned open source packages. Josh Marpet has a foundation called Value Chain Risk Institute that has a report discussion how to start measuring if an open source packag...

Related Episodes

Continue listening to more episodes from Open Source Security Podcast.

CRA vulnerability reporting with Daniel Thompson

Sep 14, 2026 - 40:40

Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and th...

Finding difficult vulnerabilities with Jaya Baloo from AISLE

Sep 7, 2026 - 29:13

Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulner...

Sovereign Tech Agency with Erik Möller

Aug 31, 2026 - 36:17

Josh chats with Erik Möller from the Sovereign Tech Agency about what they're doing. The Sovereign Tech A...

CVEs vs Advisories with Paul Asadoorian

Aug 24, 2026 - 38:07

Josh chats with Paul Asadoorian about a tool he wrote called fettle and a recent report Paul published on...

Maintaining EOL Open Source with Commonhaus and HeroDevs

Aug 17, 2026 - 34:24

Josh chats with Erin Schnabel and Rob Nalen about a new effort from Commonhaus and HeroDevs for maintaini...

Cleanup, Speedup, Levelup open source at e18e

Aug 10, 2026 - 35:08

Josh chats with James from e18e. This is a project that is working on improving Javascript packages by cl...

VulnCheck's State of Exploitation Report with Patrick Garrity

Aug 3, 2026 - 36:45

Josh chats with Patrick Garrity about the VulnCheck State of Exploitation 1H-2026 report. Patrick explain...

Securing critical infrastructure with Josh Corman

Jul 27, 2026 - 35:38

Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infra...