Maintainer spotlight: Managing dependencies and the Metasploit pen testing toolkit

Keeping open source software secure is a community responsibility. But with millions of projects, it’s hard to pinpoint the right signal from noise—and find and fix the vulnerabilities that really&...