Software supply chain security
I maintain Awesome Software Supply Chain Security, a popular and comprehensive reference of tools, trends, and challenges in the software supply chain security.
I’ve built Linux distributions of various sizes, from a consumer-focused one that has millions of end users to custom-built Linux desktop distributions for the enterprise. From there, I transitioned to researching how distribution package management, release cadence, and security are relevant to the open source software supply chain problem.