GeeCON Prague 2022: Karol Harezlak - Trusted Decentralized Package Network

Not knowing where all your software comes from means hard-to-spot risks to the integrity of your services. Without constant identity checks and safety protocols for keys and secrets, open origin dependencies can open the door to breaches, exploits and supply chain attacks. This session discusses the open origin project, Pyrsia, which addresses the mentioned safety challenges by utilizing Rust, the concept of distributed networks (p2p), blockchain, and seamlessly integrating with the popular packages and binaries that developers are already using