What have I been writing when I haven’t been writing here?

Duck Alignment Academy

• Who should enforce the code of conduct? — There are valid reasons to involve outside experts in code of conduct enforcement, but it’s ultimately a leadership responsibility.
• Duplicate bug reports and how to handle them — Duplicate bug reports waste time for everyone involved. You can reduce them by understanding the complicated dynamics.
• Who is a “member” of your project? — We often use the words “contributor” and “member” interchangeably in open source projects, but there are subtle differences between the two.

Kusari

• Celebrating OpenSSF’s Anniversary — Kusari celebrates the past, present, and future of the Open Source Security Foundation.
• Using Kusari Platform to Manage your Open Source Dependencies (ghostwrite) — Companies need to pay attention to the security of their open source dependencies. Kusari Platform can help.

DEVOPSdigest

• What America’s AI Action Plan means for you today — The recent directive from the White House is light on details, but you can start heading in the right direction to be ready when the details arrive.