PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
Posted by PrivacyWire
A dispute over PHP supply-chain security could affect a large amount of software used across the web. The disagreement over coordinated disclosure and evidence of active exploitation shows how security decisions can affect privacy and exposure to surveillance. How should projects balance early disclosure with the risk of putting users at greater risk?