Celebrating our 2024 open-source contributions
Summary: Trail of Bits engineers submitted over 750 merged pull requests in 2024, a 67% increase over 2023, with improvements across more than 80 open-source projects spanning cryptography libraries, package managers, and software indexes. The contributions included hardening package signing workflows and enhancing fuzzing capabilities, often addressing limitations the team encountered during security assessments rather than building workarounds.
Key Takeaway: The security tools thousands of engineers depend on are maintained by volunteers who review, test, and preserve compatibility for each of those 750 changes - and the maintainers carrying that weight are the single point of failure for the foundation your own controls rest on.
Read the original at Trail of Bits Blog ↗