Vendors said it is unclear what qualifies as a valid attestation, what evidence must be included or how often attestations are required.

Open-source software (OSS) may be in the crosshairs of military and government agencies as the U.S. Department of Defense (DOD) evaluates the risks of both free and proprietary software. Katie ...