Detecting Malicious Packages using the OSV API
By Nigel Douglas By now a bunch of people in the OpenSSF community might already be aware of the Malicious Packages repository, but are you using it as part of…
The Open Source Security Foundation (OpenSSF) is a community of software developers, security engineers, and more who are working together to secure open source software for the greater public good.
Collaborate on capabilities and best practices that secure open source software.
Participate in the latest community conversations and engage with experts.
Take free courses on secure coding practices as part of our certificate program.
Explore our helpful security guides to help secure your project from the start.
Members
Projects
Working Groups
What’s in the SOSS? Podcast
OpenSSF Hosted Events
OpenSSF events are a great opportunity to get involved with the OpenSSF community across the security and open source ecosystem. Join us and share ideas, progress, and collaborate on securing open source software.
Read the Latest Reports From OpenSSF
OpenSSF Annual Report
2025 Annual Report
Secure Open Source Software Vision Brief 2025
Improving Risk Management Decisions with SBOM Data
Practical Guide for Building Robust AI/ML Pipeline Security
Practical Guide for Building Robust AI/ML Pipeline Security
Recent Blog Posts
Taking Stock of the State of European Cyber Resilience Act (CRA) Compliance: An Urgent Wake-up Call for the Open Source Ecosystem
Taking Stock of the State of European Cyber Resilience Act (CRA) Compliance: An Urgent Wake-up Call for the Open Source Ecosystem
By Christopher (CRob) Robinson, OpenSSF For the better part of two years, discussions surrounding the European Cyber Resilience Act (CRA) have been somewhat theoretical: mapping requirements, debating definitions, and analyzing…
Secure Coding Guide for Python (pyscg) First Release
Secure Coding Guide for Python (pyscg) First Release
New developers require a single, framework-independent resource to establish a baseline in secure coding practices. Python is one of the most widely adopted programming languages in the world, powering everything…
Open source software is pervasive in data centers, consumer devices, and applications. Securing open source software requires fostering collaboration, establishing best practices, and developing innovative solutions.
Join the growing list of organizations supporting the advancement of securing open source technology and funding the development and adoption of OpenSSF initiatives.