OSS Rebuild is a new initiative aimed at enhancing trust in open source package ecosystems by enabling the reproduction of upstream artifacts. This project automates the creation of build definitions for popular package registries, providing security teams with valuable data to mitigate supply chain attacks while minimizing the burden on package maintainers. It seeks to improve transparency and security across various open source ecosystems, starting with support for PyPI, npm, and Crates.io.
open-source ✓
security ✓
supply-chain ✓
automation ✓
transparency ✓