BLOG
Apr 7, 2026
Case Study: Eclipse Foundation and Alpha-Omega Securing Critical Developer Infrastructure: How Open VSX is Hardening the Software Supply Chain
Executive Summary As a critical part of modern developer infrastructure powering AI-native IDEs, cloud development environments, and platform-based tooling, The Open VSX Registry sits at…
Apr 1, 2026
Case Study: From Phishing to Fast Response: How Alpha-Omega Enabled a Cross-Ecosystem Security Super Team
Executive Summary A coordinated phishing attack exposed systemic risks across npm, PyPI, and Rust. Backed by Alpha-Omega, the Rust Foundation responded faster by leveraging shared…
Mar 26, 2026
Measuring Least Privilege: Introducing cargo-capslock
By Adam Harvey, Senior Software Engineer, Rust Foundation In 2025, Alpha-Omega funded work by the Rust Foundation to implement an experimental tool to generate Capslock…
Mar 17, 2026
Scaling Open Source Security with AI
Open source software underpins much of today’s digital infrastructure, but securing it remains a difficult, constantly evolving challenge. As announced today, Alpha-Omega and the OpenSSF…
Mar 17, 2026
Linux Foundation Announces $12.5 Million in Grant Funding from Leading Organizations to Advance Open Source Security
Anthropic, Amazon Web Services (AWS), GitHub, Google, Google DeepMind, Microsoft, and OpenAI Join Forces with the Foundation to Invest in Sustainable Security Solutions for the…
Mar 13, 2026
Surfacing Security Advisories on crates.io: Bringing Vulnerability Data to the Point of Discovery
by Dirkjan Ochtman When Rust developers evaluate a new dependency, the first place most of them go is crates.io — the official Rust package registry.…
Feb 27, 2026
The Economics of Package Registries and Why It Matters
At FOSDEM 2026 in Brussels, Alpha-Omega co-founder Michael Winser delivered a direct message: the economics of package registries are misaligned with the security expectations placed…
Feb 17, 2026 In developer security, Eclipse Foundation, Open VSX
Strengthening supply-chain security in Open VSX
This blog was originally published on blogs.eclipse.org written by Christopher Guindon Introduction The Open VSX Registry is core infrastructure in the developer supply chain, delivering extensions developers…
Jan 21, 2026 In Alpha-Omega, Events, FOSDEM, FOSDEM-2026, Grants, Open Source Software, Security
Alpha-Omega at FOSDEM 2026: Confronting the Economics and Reality of Open Source Security
Every year, FOSDEM brings together the people who build, maintain, and depend on open source software. It is a place where hard technical problems meet…
Dec 19, 2025 In Ada Logics, Alpha-Omega, open source AI security, OSTIF
The Open Source AI Series: A security health check of 25 popular open source AI/LLM projects: Findings and lessons learned
Alpha-Omega partnered with Ada Logics and OSTIF to audit 25 widely used open source AI and LLM projects. This post shares key findings, common security…
