Just shipped a new newsletter to my GitHub Sponsors! 🎁
This one includes my latest talk, secure publishing research, #Expressjs updates, #OSSF #Scorecard improvements, and a bunch of ecosystem news.
It will be public soon, but you can read it early and support my OSS work here:
https://github.com/sponsors/UlisesGascon
🚀 Recent #Lodash updates focus on stronger #CI & #security posture!
✅ CI support expanded (Node 4 → 25)
🌐 New browser tests via #Playwright
📝 Docs now have dedicated CI
🔒 Added #OpenJS #CNA escalation policy
📊 Reporting #OSSF #Scorecard
🧯 New Incident Response Plan (#IRP)
🧠 Threat Model inspired by #Express & #Webpack
More details: https://blog.ulisesgascon.com/the-future-of-lodash
We're excited to announce that Stalwart has been selected to participate in Session 2 of GitHub's Open Source Secure Fund (OSSF), a prestigious program designed to enhance security across the open source ecosystem. This recognition represents not only an acknowledgment of Stalwart's growing importance in the email infrastructure space but also our commitment to maintaining the highest security standards.
I am very proud to announce that the #OSSF #Scorecard Monitor tool that I created, it will be part of the @openssf as I donated the project.
I will continue working on it, so be ready for the next release!
More details about the journey: https://github.com/ossf/scorecard-monitor/issues/79
TL;DR: I am very glad to announce that this repository is now part of the OSSF Organization, so the Scorecard Visualizer is now an official tool in the OSSF Scorecard ecosystem. 🎊 🎊 Important Detai...
Yes! I am very proud to announce that the #OSSF #Scorecard Monitor tool that I created, it will be part of the @openssf as I donated the project.
I will continue working on it, so be ready for the next release!
More info: https://github.com/marketplace/actions/openssf-scorecard-monitor
A big positive shout out to the #OSSF https://openssf.org/ for their fantastic guide on compiler security options. If you compile code please read!
Ulises Gascon
Mert Şişmanoğlu
Stalwart Labs
Jeff Moss
Sven Ruppert
