Big Thoughts, Open Sources Inaugural Episode: Beyond the Hype: Brian Fox on Securing the Agentic Future of Open Source

About this episode

In this inaugural episode, host Crob interviews Brian Fox about the challenges of securing open source software amidst rapid AI adoption.

In this inaugural episode of Big Thoughts and Open Sources, host Crob sits down with Brian Fox, Co-founder and CTO of Sonatype, to dissect the friction between rapid AI adoption and foundational software security. Brian shares insights from the 11th annual State of the Software Supply Chain Report, revealing the emergence of "slop squatting" and the high frequency of AI models recommending non-existent or vulnerable dependencies. The conversation explores how the Model Context Protocol (MCP) ...

People in this episode

Host: Crob

Guest: Brian Fox

Topics covered

• AI adoption
• software security
• open source
• software supply chain
• vulnerable dependencies

Keywords

• AI
• open source
• software security
• supply chain
• dependencies
• slop squatting
• Model Context Protocol

Mentioned in this episode

Organizations: Sonatype, OpenSSF

More episodes of What's in the SOSS? An OpenSSF Podcast

• The Ghost in the Dependency Tree: Navigating Open Source End-of-Life with HeroDevs · June 2, 2026 · 27 min
• Beginner to Builder: Shaping the Conversation in Open Source Security · May 19, 2026 · 26 min
• Packaging, Transferring, and Deploying Software in Air-Gapped Environments with Zarf · May 5, 2026 · 19 min
• Building a Connected Africa: The Origin Story of OSSAfrica with Prince Asiedu · April 21, 2026 · 27 min
• From Noise to Signal: Security Expertise and Kusari Inspector with Mike Lieberman · March 24, 2026 · 25 min
• Empowering New Maintainers: Inside the OpenSSF Mentorship Program · March 17, 2026 · 23 min