Tidelift’s Post

Transcript

You're an application developer, part of a team of developers at a large corporation. It's the start of a new sprint and you've been assigned a handful of stories to code. You know it's faster to pull in existing open source packages than write your own code from scratch, but you also want to avoid future headaches from bringing in open source packages that are insecure, unmaintained, or use an incompatible or inaccurate license. That's where Tidelift comes in. Tidelift partners with the maintainers of thousands of the most relied upon open source packages and pays them to implement industry-leading secure software development practices and document the practices they follow. So you use Tidelift package intelligence to proactively evaluate whether your open source package choices are secure and well maintained. Now you can finish coding your stories with confidence, knowing that the open source packages you bring in won't be coming back to haunt you later.