CISA and OpenSSF Release Framework for Package Repository Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced that it's partnering with the Open Source Security Foundation (OpenSSF) Securing Software Repositories Working Group to publish a new framework to secure package repositories.
Called the Principles for Package Repository Security, the framework aims to establish a set of foundational rules for package

agency called cisa cybersecurity foundation framework infrastructure infrastructure security open source open source security open source security foundation openssf package principles release repositories repository rules security security foundation software the open source security foundation working