Skip to content

Commit

Permalink
chore: fixed typo
Browse files Browse the repository at this point in the history
  • Loading branch information
himazawa committed Mar 30, 2024
1 parent ad31253 commit 886e8a2
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion content/posts/xz-backdoor/index.en.md
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,7 @@ A large and active community can provide additional eyes for reviewing code, rep
Consider whether the project receives financial support or sponsorship from reputable organizations. Projects with dedicated funding tend to have more resources available for security audits and ongoing maintenance.
And also are less likely to be completely abandoned.

Remember: you want to rely on that dependency for the whole week, not only during the maintainer's freetime, projects with a nice financial support will be likely to be full-time projects and not just hobbies.
Remember: you want to rely on that dependency for the whole week, not only during the maintainer's freetime, projects with a nice financial support will likely be full-time jobs and not just hobbies.

### SDLC
A good portion of the evaluation should also focus on the SDLC to e ensure security (and quality in general) gates are correcly implemented, approvals on PRs are mandatory and there are healthy practices in place to prevent one single contributor to push malicious code without approval.
Expand Down

0 comments on commit 886e8a2

Please sign in to comment.