Broadcom launches TrueSource to secure key open-source Java and Python libraries
Broadcom announced a new TrueSource service that will vet and supply trusted versions of critical open-source components such as Spring and RabbitMQ for its Tanzu portfolio.
Broadcom introduced TrueSource, a service aimed at delivering clean, secure artifacts for popular open-source components that underpin its Tanzu suite, including the Spring framework and RabbitMQ. The company will curate essential libraries, verify them against a reference architecture, and make them supportable for enterprise use. Purnima Padmanabhan, vice-president of Broadcom’s Tanzu division, said the effort extends beyond Java to cover Python, Node.js and other widely used packages.
VMware, which now sells the Tanzu platform, affirmed it will collaborate with upstream maintainers to provide patches and maintain community ownership of the code. The announcement coincided with VMware’s annual Explore conference, highlighting the vendor’s commitment to open-source security.
Why it matters
Securing core open-source libraries helps protect countless enterprise applications from vulnerabilities.
In this story
