Threats against software supply chains are real. Research teams continue to report rapidly rising numbers of attacks. Stephen Chin, JFrog VP Developer Relations, announces the open-source, decentralized package manager project Pyrsia. Multiple companies are running infrastructure for Pyrsia that supports a wide-scale peer-to-peer network (using libp2p). Pyrsia provides a transparency ledger that’s an immutable history of everything that goes into the network, providing the needed auditability, SBOMs, and dependency tracking. Initial companies part of Pyrsia’s launch include JFrog, Docker, DeployHub, FutureWave and Huawei. More info at https://pyrsia.io/.
Want more TSTV interviews? Click here.