OpenSSF members back enterprise funding models for package registries

Published Wednesday, September 16, 2026 · 9:06 AM EDT

The OpenSSF Governing Board said enterprise users should participate in sustainable funding models for public package registries, while preserving free access for individual developers and small organizations. The group said registries including PyPI, Maven Central, crates.io, RubyGems and npm face rising infrastructure, security and compliance demands. It did not prescribe pricing or terms, instead backing registry-led experiments and enterprise participation as customers.

Sources

Open Source Security Foundation

Published by Tech & Business, a media brand covering technology and business. This story was sourced from Open Source Security Foundation and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security

Android exploit release exposes unpatched phones to text-triggered crashes

Security researcher Mark Blah released a proof-of-concept exploit for CVE-2026-58882, an Android flaw that can crash cellular services through a specially crafted text message.

AI Science

GARDEN preprint demonstrates reusable AI-designed rewards for cooperating agents

Researchers report in a preprint that GARDEN, a system that uses a language model to design rewards for cooperating agents, improved performance when its reward programs transferred unchanged to related scenarios unseen during design.

Infrastructure Products

Intel redirects planned PC chip capacity toward Xeon production

Intel is reallocating manufacturing resources from client processors to server CPUs as demand exceeds supply, Tom's Hardware reported, citing company executives.

Products Policy

Binance seeks licensed return to Malaysia through regulatory talks

Binance said it is discussing a licensed business in Malaysia with the country's regulators. The cryptocurrency exchange is seeking a route back into a market where authorities have blocked its website and applications. The discussions concern access through a licensed operation.

Science Security

Security benchmark finds combined static and AI reviews catch 101 of 108 flaws

A preprint evaluating security tools found that combining Snyk Code with Claude Code using Opus 5 at xhigh effort detected 101 of 108 reference vulnerabilities. Individually, the tools found 89 and 85 respectively.

Robotics

Meta reportedly builds humanoid prototype with Fourier

Meta has built a working humanoid robot prototype with Chinese robotics company Fourier and is developing a second version, The Information reported, citing people familiar with the project. The first prototype reportedly took about three months to build.