OpenSSF

OpenSSF Newsletter – May 2026

What a month! May was packed with milestones for the OpenSSF community, and we're still riding the high from an incredible OpenSSF Community Day North America in Minneapolis. Read OpenSSF May Newsletter.

OpenSSF Notes Quarter of Growth with New Members, Added AI Security Resources, and Growing Community

Introducing the First Cohort of the OpenSSF Ambassador Program

Detecting Malicious Packages using the OSV API

Taking Stock of the State of European Cyber Resilience Act (CRA) Compliance: An Urgent Wake-up Call for the Open Source Ecosystem

Secure Coding Guide for Python (pyscg) First Release

New developers require a single, framework-independent resource to establish a baseline in secure coding practices. Python is one of the most widely adopted programming languages in the world, powering everything from web applications and data pipelines to AI/ML systems and cloud infrastructure.

Hack to the Future: The Impact and Legacy of the DARPA AIxCC Challenge

The Road to Gold: How CPS Set a New Standard for Security and Quality in Open Source

In the world of open source, trust is our most valuable currency. ONAP is a “collection of individual, semi-standalone network automation functions that provide design, orchestration, observability, and automation of network and edge services for operators, cloud providers, and enterprises” (per ONAP).