Open source registries don't have enough money to implement basic security

cross-posted from: https://infosec.pub/post/42165288

Free beer is great. Securing the keg costs money fosdem 2026  Open source registries are in financial peril, a co-founder of an open source security foundation warned after inspecting their books. And it's not just the bandwidth costs that are killing them.…