Versions Compared

Old Version 10

changes.mady.by.user Unknown User (mjc)

Saved on

compared with

New Version 11

changes.mady.by.user Unknown User (mjc)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: add a summary

Read Ahead material for Software Security Meeting pre-call, January, 2022. Context for this meeting: White House national security adviser asks software companies to discuss cybersecurity.

Executive Summary

  • The Apache Software Foundation (ASF) is one of the largest open source organizations, home to many high profile projects.
  • Background on the ASF (statistics, videos, and links) can be found at: https://apache.org/.
  • Software developed at the ASF is made available at no cost and without warranty, under a license permitting commercial reuse without notification.  Many commercial products include ASF software without the end user being aware.
  • Projects act independently and set their own technical policies and directions and have their own communities of developers and management
  • Required policies exist for important supply-chain functions such as security vulnerability handling and notification, release management and distribution.

Foundation organization and governance structure (https://www.apache.org/foundation/governance/)

...