Tidelift (now Sonar)

This week we released a new @tidelift company video that in 3 minutes articulates the problem Tidelift solves, how we solve it, and what makes us unique. Watch it the new video on our YouTube channel 📺 : youtu.be/IIRHRIDZ5xc

Big news! Sonar has entered a definitive agreement to acquire Tidelift to enhance the security and resilience of open source software. Together, we’re raising the bar for code quality and security. Read the blog post from our CEO Donald Fischer: bit.ly/41DkwwH

Have you had a chance to read our 2024 maintainer impact report? 📚 Learn how one @tidelift customer saved $1.1M and reduced application risk by 37%. Read here ▶️bit.ly/3ZgljlM

The 2024 @Tidelift maintainer impact report is out! 🎉 See how one customer saved $1.1M & reduced app risk by 37% by investing directly in the security and resilience of their open source software. Read the full report here: bit.ly/3V0hgYi

Are open source maintainers getting the support they deserve? 🤔 In a @TechstrongTV interview, @tidelift @dff & @sonatype @Brian_Fox discuss how paying maintainers boosts software security. Discover insights from recent surveys & reports. Watch here: techstrong.tv/videos/intervi…

In the latest #OSSPodcast episode, @tidelift @dff and @Brian_Fox @sonatype join hosts Josh Bressers and Kurt Seifried to discuss the current state of #oss, alongside findings from the most recent Tidelift and Sonatype reports on oss. Tune in here! 👉opensourcesecurity.io/2024/11/10/epi…

Key takeaways from @luis_in_brief’s recent #TechCrunchDisrupt2024 panel: - Current security model for securing #oss is insufficient - Volunteer maintainers can’t fix it alone - Orgs using oss must step up - New gov’t regulations will force the issue blog.tidelift.com/luis-villa-at-…

We’re excited to share the story of jackson-databind maintainer Tatu Saloranta 🎉 With income from @tidelift and our customers, he was able to remove risk from RCE vulnerabilities and implement secure software development practices. Watch the story 📺 👇

What are the latest government actions impacting open source? 📜 🤔 @tidelift co-founder and General Counsel @luis_in_brief rounds up the latest changes in the US and EU in a new post on the Tidelift blog 👉 blog.tidelift.com/cisa-cra-and-p…

NEW: a case study on the business impact of paying #oss maintainers to scale real-world app security Discover how one company saved $1.1M while reducing application risk by turning 37% of their packages from “unknown future” to reliably maintained! 💰 blog.tidelift.com/the-business-i…

This Wednesday, Tidelift co-founder @luis_in_brief is speaking #TechCrunchDisrupt2024! Oct 30, 1:05 PM PST 🕜 Builder's Stage 🏢 The panel? "Free but not cheap: the open source dilemma" w/ @AevaBlack & @BogieBalkansky Register now 👉 techcrunch.com/events/tc-disr…

Excellent synopsis🗒️and explanation for how and why @GRESEARCHjobs supports💪 #opensource software and the #OSS ecosystem. Join us! gresearch.com/news/how-g-res… @linuxfoundation @LF_Europe @openinfradev @openssf @FINOSFoundation @openuk_uk @github @tidelift @opencollect

Join @partridgehouse & @sethmlarson at #AllThingsOpen2024 TODAY! 1:45 PM ET Learn what it takes for a critical package to ship key features like: - Securing the dev, build, & release process - Responding quickly to vulns - Ensuring a community can grow & maintain the project

The final finding from the 2024 @tidelift state of the #oss maintainer report The oss maintainer community is graying: - Maintainers aged 46-65 doubled since 2021 - Only 10% < 26 (down from 25% in 2021) How can we attract the next gen of maintainers? 🤔 blog.tidelift.com/the-open-sourc…

Don't miss @partridgehouse at #SOSSFusion Atlanta tomorrow! Learn about: - Maintainer perspectives on #xz - New data from the 2024 state of #oss maintainer report - Real application impacts of investing in #opensource software Register: hubs.la/Q02Rdb8j0 @openssf #OpenSSF

The latest finding from the 2024 @tidelift state of the #oss maintainer report: 71% of those under 26 (vs. 42% of those 46 🔼) use AI tools regularly 🤖 Overall, 48% of all maintainers are currently using AI tools in their work Read the entire finding 👉blog.tidelift.com/younger-open-s…

Thank you @aalmiray for being awesome! 😁🧡

Join us at #DevOpsDaysBoston on Oct 22! @lucky_sharms7 speaks on "Unpaid maintainers: The Security Threat No One Is Talking About (yet)" @devopsdaysbos Learn about #oss maintainer challenges & success stories & why we need to #PayTheMaintainers Register: devopsdays.org/events/2024-bo…

🤖 AI coding tools: what do #oss maintainers think? Our 2024 survey shows mixed feelings: 45% predict negative impact 31% foresee positive impact 64% less willing to accept AI-generated contributions Learn more about maintainer concerns in their words 👉 blog.tidelift.com/ai-based-codin…

How do we fund #opensource? 🤔 @InfoWorld explores this crucial question, featuring insights from @tidelift co-founder & CEO @dff and Tidelift partnered maintainers. infoworld.com/article/355784…

The #xz utils hack has shaken maintainer trust. Our 2024 survey shows: 66% less trusting of non-maintainer PRs 37% less trusting of co-maintainers But there's hope: "Trusting new maintainers by default is the open source way, and how it should remain." blog.tidelift.com/xz-utils-hack-…