Aikido Joins OpenJS Security Stewardship Program to Fund Node.js Security
Summary
Aikido joined OpenJS’s Security Stewardship Program as an inaugural partner, funding a pool split between vulnerability bounties and maintainer support, starting with Node.js. The program also provides vulnerability triage and CVE coordination.
Key points
- Aikido joined the OpenJS Security Stewardship Program as an inaugural partner, starting its support with Node.js.
- The funding pool is split evenly between bug bounties for vulnerability researchers and direct support for maintainers.
- The program handles vulnerability triage and CVE coordination through OpenJS, a CVE Numbering Authority.
- The article cites reduced or paused bug bounty support and an increase in lower-quality, AI-generated reports as challenges for open-source security.
Article Details
- Event Type
- Aikido joined OpenJS’s Security Stewardship Program as an inaugural funding partner, starting with Node.js.
- Impact
- The program’s funding pool is split evenly between vulnerability bounties and maintainer support. OpenJS also handles vulnerability triage and CVE coordination through the program. The article describes support for vulnerability discovery and remediation, not a confirmed security incident.