Broadcom Pledges TrueSource Curation to Secure Spring Open Source Components
Broadcom is rolling out TrueSource for its Tanzu business, aiming to identify key open source components that Spring users rely on and ensure the resulting artifacts are secure. Its curation process checks that libraries match a reference architecture and remain supportable by the maintainers of record, with Broadcom saying community maintainers must stay the source of truth.