--- title: “Morally repugnant shortsightedness”: Why open source... description: The Open Source Security Foundation (OpenSSF) has announced five new members: ActiveState, Aikido Security, Minimus, TuxCare, and the FreeBSD Foundation. The... canonical: https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: “Morally repugnant shortsightedness”: Why open source security leaders say companies must stop freeloading on maintainers | daily.dev og:description: The Open Source Security Foundation (OpenSSF) has announced five new members: ActiveState, Aikido Security, Minimus, TuxCare, and the FreeBSD Foundation. The... og:url: https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4 og:image: https://api.daily.dev/og/posts/Zfvb7auA4.png og:image:alt: “Morally repugnant shortsightedness”: Why open source security leaders say companies must stop freeloading on maintainers og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # “Morally repugnant shortsightedness”: Why open source security leaders say companies must stop freeloading on maintainers **[The New Stack](https://daily.dev/sources/newstack)** · 6 min read · 0 upvotes · 0 comments ## Summary The Open Source Security Foundation (OpenSSF) has announced five new members: ActiveState, Aikido Security, Minimus, TuxCare, and the FreeBSD Foundation. The announcement comes amid growing pressure from mandatory security standards like the EU Cyber Resilience Act. Industry leaders from the new member organizations voiced strong opinions on open source sustainability, with Minimus's Kat Cosgrove calling it 'morally repugnant' that companies profit from open source while refusing to support maintainers. Other members emphasized shifting security controls into developer workflows — repos, CI/CD pipelines, package managers — rather than relying on dashboards. OpenSSF also announced Python secure coding resources, its first cohort of Ambassadors, and new sandbox projects at Community Day North America. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [OpenSSF Announces New Members & AI Security Resources](https://daily.dev/posts/openssf-announces-new-members-ai-security-resources-dhtsiofbz) · OpenSSF · 0 upvotes · 0 comments - [OpenSSF Newsletter – October 2026 – Open Source Security Foundation](https://daily.dev/posts/openssf-newsletter-october-2026-open-source-security-foundation-ly3binpyh) · OpenSSF · 0 upvotes · 0 comments - [AI Companies Put $12.5M Into Open Source Security to Fix a Problem Their Tools Helped Create](https://daily.dev/posts/ai-companies-put-12-5m-into-open-source-security-to-fix-a-problem-their-tools-helped-create-fqepn8wn7) · It's Foss · 0 upvotes · 0 comments - [JetBrains Joins the Open Source Security Foundation](https://daily.dev/posts/jetbrains-joins-the-open-source-security-foundation-xa20xeeqf) · JetBrains · 3 upvotes · 0 comments --- Tags: [#linux](https://daily.dev/tags/linux), [#open-source](https://daily.dev/tags/open-source), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"“Morally repugnant shortsightedness”: Why open source security leaders say companies must stop freeloading on maintainers","url":"https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4"},"datePublished":"2026-05-21T14:04:39.577Z","dateModified":"2026-10-14T02:31:09.220Z","description":"The Open Source Security Foundation (OpenSSF) has announced five new members: ActiveState, Aikido Security, Minimus, TuxCare, and the FreeBSD Foundation. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8ad52708daa9b37bcfa70c70227ab29a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8ad52708daa9b37bcfa70c70227ab29a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The New Stack","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The New Stack","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/newstack","url":"https://daily.dev/sources/newstack"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/morally-repugnant-shortsightedness-why-open-source-security-leaders-say-companies-must-stop-freel-zfvb7aua4","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"linux,open-source,security","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The New Stack","item":"https://daily.dev/sources/newstack"},{"@type":"ListItem","position":3,"name":"“Morally repugnant shortsightedness”: Why open source security leaders say companies must stop freeloading on maintainers"}]} ```