Abandoned open source with Josh Marpet

Josh welcomes Josh Marpet for a discussion about abandoned open source packages. Josh Marpet has a foundation called Value Chain Risk Institute that has a report discussion how to start measuring if an open source package might be abandoned. There's a lot of data, but not a lot of groups using that data to help make informed decisions about using open source. VCRI is one of those places that's starting to do this. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-07-VCRI-josh-marpet

Episode metadata supplied by the publisher feed · Published Jul 20, 2026

Embed this episode

Attribution link and audio player

Ready to play

Abandoned open source with Josh Marpet

0:00 34:16

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

The Red Room Redacted Information Security The show where red team stories from around the world are explored by the guys at Redacted Information Security, and new techniques and tools are pulled apart and discussed. Explicit

Frequently Asked Questions

How long is this episode of Open Source Security?

This episode is 34 minutes long.

When was this Open Source Security episode published?

This episode was published on July 20, 2026.

Can I download this Open Source Security episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!