<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=705633339897683&amp;ev=PageView&amp;noscript=1">

Resources to get you started

Case study: Distributive

Case study: Distributive

How Distributive uses Tidelift to maximize the security and resilience of its open source application components

How the maintainers of urllib3 keep the project secure and healthy (and why you should care)

How the maintainers of urllib3 keep the project secure and healthy (and why you should care)

Tidelift VP of Product Lauren Hanford sits down to chat with Seth Larson about all the systems and processes Seth and the team has put into place to keep urllib3 happy and healthy for all those millions of Python dependencies.

Fireside chat: Why this CISO thinks SBOMs aren't the silver bullet

Fireside chat: Why this CISO thinks SBOMs aren't the silver bullet

Tidelift CEO and co-founder Donald Fischer sits down with Andy Ellis, former Chief Security Officer at Akamai turned startup advisor and investor and talk about the true consequences of SBOMs.

Webinars

Why software composition analysis tools aren't enough

Historically, software composition analysis (SCA) tools were one primary way to get better visibility into open source security, maintenance, and licensing risk. But, by themselves, they are not enough.

AWS + Tidelift panel: Best practices for inclusive development

Inclusive is one of our core values at Tidelift. So we were delighted and inspired when our friends at AWS were interested in collaborating with us on a panel discussion about inclusive practices in open source software development.

Fireside chat: Why this CISO thinks SBOMs aren't the silver bullet

Tidelift CEO and co-founder Donald Fischer sits down with Andy Ellis, former Chief Security Officer at Akamai turned startup advisor and investor and talk about the true consequences of SBOMs.

Analysts

Tidelift named Gartner® Cool Vendor™

Tidelift named a Cool Vendor in the May 2022 Gartner Cool Vendors in Software Engineering

The importance of a sound open source supply chain management strategy

As part of an open source software strategy, organizations are increasingly hosting curated OSS package management and artifact repositories internally to mitigate risk and reduce developer friction.

Best practices for safely and effectively building enterprise software applications with open source

Guest speaker IDC Research Director Jim Mercer shares insights from recent IDC research into how organizations can safely and effectively use open source for building applications.

Guides and reports

Cooking with Tidelift

With many people quarantined at home with their families during the pandemic, we thought it might be fun to tell the story of how the Tidelift Subscription works—as a children's book.

Tidelift reference architecture

A technical explanation of all the functionality included in the Tidelift Subscription

The Tidelift guide to managing open source

Want to understand the best practices for responsibly using open source components in your organization?

Case studies

Case study: urllib3

Secure development practices and Python supply chain impact

Case study: Distributive

How Distributive uses Tidelift to maximize the security and resilience of its open source application components

Surveys

The 2022 open source software supply chain survey report

Tidelift fielded our annual survey of technologists—including software developers, engineering executives and managers, architects, and devops pros—who build applications with open source.

The 2021 Tidelift open source maintainer survey

In early 2021, Tidelift fielded its first-ever comprehensive survey of open source maintainers.

The 2020 Tidelift managed open source survey

We highlight nine of the most interesting revelations that help us understand how to make open source work even better for development teams and the organizations they work within.

Videos

How to generate an SBOM with Tidelift

Tidelift solutions architect Sean Wiley shows how to demonstrate a software bill of materials (SBOM) with Tidelift.

Software + People: An optimistic (and practical) way forward for the open source software supply chain

Tidelift CEO Donald Fischer gives a talk entitled Software + People: An optimistic (and practical) way forward for the open source software supply chain at Tidelift's annual conference, Upstream.

A demo of the Tidelift Subscription

Watch an on-demand demo of the Tidelift Subscription.

Podcasts

We ask a lawyer about GitHub Copilot

Luis Villa of Tidelift joins the show to discuss GitHub Copilot and the implications of an AI pair programmer from a legal perspective.

Supporting Python open source projects and maintainers

How do you define open source software? What are the challenges an open source project and maintainers face?

Maintainer spotlight! Ned Batchelder

In this episode we’re shinning our maintainer spotlight on Ned Batchelder.

Free as in Friday, a casual chat about all things open source and technology

Free as in Friday: Episode 5

Luis and Josh lead a discussion with three folks (staff, advisor, and grantee) from the Chan-Zuckerberg Initiative Open Science work.

Free as in Friday: Episode 4

Luis and Josh have a conversation with A conversation with Dorothy Howard and Stuart Geiger of UCSD.

Free as in Friday: Episode 3

Luis and Josh chat with Jorge Castro, who currently works as a community manager Arrikto, and has previously worked at VMWare and Docker.

Blogs

Webinar: How the maintainers of urllib3 keep the project secure and healthy

Webinar: How the maintainers of urllib3 keep the project secure and healthy

Case study: How Distributive uses Tidelift to maximize the security and resilience of its open source application components

Case study: How Distributive uses Tidelift to maximize the security and resilience of its open source application components

Take the 2023 open source maintainer survey!

Take the 2023 open source maintainer survey!

News

Tidelift raises $27M to secure open source supply chain

Tidelift raises $27M to secure open source supply chain

Tidelift raises $27 million in Series C funding as open source software supply chain health and security become urgent priorities

Tidelift raises $27 million in Series C funding as open source software supply chain health and security become urgent priorities

Venture Capital Deals

Venture Capital Deals