Contributing Writer

Brian Fox

Brian Fox is co-founder and CTO of Sonatype, a member of the Apache Software Foundation and former chair of the Apache Maven project. As a direct contributor to the Maven ecosystem, including the maven-dependency-plugin and maven-enforcer-plugin, he has over 20 years of experience driving the vision behind, as well as developing and leading the development of software for organizations ranging from startups to large enterprises. Brian is a frequent speaker at national and regional events including Java User Groups and other development related conferences.

2Articles shown

ContributorDevOps.com

𝕏 in ✉

Beats

BlogsdevelopersEuropean Unionapplication securitydevsecops

Latest from Brian

Blogs

The Cyber Resilience Act Threatens the Future of Open Source

The EU is set to vote on the CRA July 19, 2023. Sonatype’s Brian Fox believes it’s a threat to the future of open source development.

Jul 18, 2023 · 3 min

All articles by Brian Fox

Showing 1–2

MAR7

Blogs

Malicious Intent: Open Source Developers, Please Protect Your Users

For the second time in just a few weeks we’re seeing the fallout of missteps taken by publishers of open source components. It was just recently that I wrote about the GitHub id of go-bindata being highjacked. We don’t know for certain if the intentions were malicious, but the risk was obvious. Even more recently we find […]

3 min