OpenSSF Releases Open Source Project Security Baseline

The Open Source Security Foundation (OpenSSF) has announced the initial release of the Open Source Project Security Baseline (OSPS Baseline), a new initiative designed to help open source projects enhance their security posture through a set of tiered best practices. This baseline aligns with global cybersecurity frameworks, including the EU Cyber Resilience Act (CRA) and the NIST Secure Software Development Framework (SSDF), making it easier for maintainers and contributors to adopt practical security measures. The early adoption of the OSPS Baseline by projects such as GUAC, OpenVEX, bomctl, and OpenTelemetry demonstrates a commitment from the open source community to strengthening security foundations. This release marks a significant step toward standardized, scalable security improvements in open source software development.