Padmanabhan said that promise means VMware will also provide “TrueSource trusted artifacts” for code that is not part of Spring, including the wider Java ecosystem, Python, and Node.js.
…
Broadcom’s curation process ensures that the libraries conform to a reference architecture and are supportable by the maintainers of record,” according to a company statement. “Thousands of engineers across Broadcom’s software divisions scan, fix, contribute to, and consume them every day.”
…
A VMware spokesperson told The Register the Broadcom business unit “will work with and support maintainers on open source software and we will provide fixes to open source upstream for any active projects.”
…
“With Spring and RabbitMQ, we are the maintainers. For other open source software, we will work with the maintainers. We believe that the community maintainers must remain the source of truth,” the spokesperson said.”
🔗 Broadcom pledges to lock down open source Python, Java libraries
Leave a Reply