Leading Open Source Author Calls for Verification over Trust in Software Supply Chains (opens in new tab)

In a blog post published in March 2026, Daniel Stenberg, creator and lead developer of curl, makes the case that the software industry's default position of trusting well-known components is no longer adequate. Stenberg argues that users and organisations should actively verify the software they consume, and he uses curl's own practices as a concrete example of how that can be done. By Matt Saunders