Celebrating our 2025 open-source contributions

Summary: Trail of Bits engineers submitted over 375 pull requests that were merged into non-Trail of Bits repositories in 2025, touching more than 90 projects from cryptography libraries to the Rust compiler. Most of these contributions came out of client work, where engineers fixed bugs or added missing features upstream rather than forking projects or patching them locally, with some work funded directly by organizations like the OpenSSF and Alpha-Omega.
What's compelling: The post credits maintainers with the work that outlasts a merged pull request: writing documentation, keeping CI green, fielding bug reports, and answering the same question from the fifth person who asks. For a security leader, that is the unpaid labor the whole ecosystem depends on, and it is the part no contribution count captures.

Read the original at Trail of Bits Blog ↗