Participating in the GitHub Secure Open Source Fund

We’ve been keeping a secret for a little while! 🤐

I’m excited to finally share that urllib3 participated in Session 3 of the GitHub Secure Open Source Fund as part of a cohort of 67 critical projects. Fellow maintainer Quentin Pradet and I leveraged this support to fortify the library you all rely on through proactive security hardening.

During the session, we:

• Focused on modern threat models and secure coding practices.
• Learned about new tooling and hardened repository settings to ensure our development and release processes remain among the most secure in the ecosystem.
• Established a formal Security Policy to streamline vulnerability reporting.
• Gained access to a secure collaborative space to discuss complex security issues with top-notch engineers.

A huge thank you to the GitHub Secure Open Source Fund and the GitHub Security Lab for their support and for providing the space to focus on these improvements. It’s partnerships like these that keep open source sustainable and safe for everyone.

You can read more about the initiative and the other projects involved in GitHub’s official announcement, and GitHub has opened applications for Session 4.

Onward to a more secure Python ecosystem!