OSPS Baseline - Improving Your Project Security the Easy Way

Learn how to enhance your open source project's security posture using the Open Source Project Security (OSPS) Baseline in this 25-minute conference talk by Ben Cotton from Kusari, presented at OpenSSF. Discover practical, actionable guidance for implementing security policies appropriate to your project's size and scope, addressing the common challenge that security improvements often feel like unfunded mandates to developers who aren't security experts. Explore how the OSPS Baseline differs from similar initiatives like OpenSSF Scorecard and understand why adopting these security practices benefits both maintainers and users throughout the entire ecosystem. Gain insights into how the OSPS Baseline can help streamline compliance requirements, particularly for maintainers dealing with obligations such as the Cyber Resilience Act (CRA), while making security improvements more accessible and manageable for overworked project maintainers.