alt Hacker NewsYikes. Man, there’s a market opening for someone to redistribute open source projects with supply chain assurances!
Replies
inigyou • today at 6:53 PM
There's been a market for a while. In thinking of Azul Java, which is just OpenJDK but with someone to point the finger at, and costs money.
There is a market for that, indeed. Hardened container images and hardened CI actions have been a thing for a while, with some companies providing exactly that.