# Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

**URL:** <https://discourse.sustainoss.org/t/castles-built-on-sand-towards-securing-the-open-source-software-ecosystem/1240>\
**Category:** Uncategorized\
**Created:** [April 19, 2023, 10:21pm UTC](https://discourse.sustainoss.org/t/castles-built-on-sand-towards-securing-the-open-source-software-ecosystem/1240 "2023-04-19T22:21:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![RichardLitt](https://yyz2.discourse-cdn.com/flex032/user_avatar/discourse.sustainoss.org/richardlitt/32/8_2.png) [@RichardLitt](https://discourse.sustainoss.org/u/RichardLitt)\
**Post date:** [April 19, 2023, 10:21pm UTC](https://discourse.sustainoss.org/t/castles-built-on-sand-towards-securing-the-open-source-software-ecosystem/1240/1 "2023-04-19T22:21:30Z")

</div>

> **[Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem](https://securityandtechnology.org/virtual-library/reports/castles-built-on-sand-towards-securing-the-open-source-software-ecosystem/)**
>
> This report advocates shifting open-source software security to a shared responsibility model, redoubling support for existing secure software development frameworks, policies, and licenses, and reexamining approaches to vulnerability management and...

Not sure this has been shared yet! Interesting resource.