Most Open Source Maintainers Don't Know About Current Security Standards
Which of the following standards are you aware of?
bar chart titled: Most Open Source Maintainers Don't Know About Current Security Standards
Repondents answered the question, Which of the following standards are you aware of?
OpenSSF Security Scorecards 28%
NIST Secure Software Development Framework (SSDF) 26%
Supply Chain Levels for Software Artifacts framework (SLSA) 13%
None 52%
source: "The 2023 Tidelift State of the Open Source Maintainer Report," Tidelift.