Description
The contract concerns the project "Conda-Forge CVE Mapping" , which covers vulnerability handling and dedicated security maintenance for conda-forge, the largest package repository run by its community in the conda ecosystem. As part of five work packages, the contract covers a machine-readable record of the upstream software from which conda-forge packages are built; an openly licensed dataset of the vulnerabilities affecting those packages; the authority for conda-forge to publish its own vulnerability records; and a funded security function for the package archive and the shared systems that build and publish it. The aim of this service is to give the software supply chain of public research the capacity to identify, disclose and repair the vulnerabilities it distributes.
Official source
Source: TED - Tenders Electronic Daily (Publications Office of the EU)
Always verify details on the official notice.
Last verified against TED - Tenders Electronic Daily (Publications Office of the EU) 8 hours ago
More from this buyer
Full buyer profileRecent awards
- Germany - Software programming and consultancy services - Framework Agreement Direct Contributions - Lot 3: Post-Quantum Encryption Readiness
- Germany - Software programming and consultancy services - Framework Agreement Direct Contributions - Lot 2: Transition to Memory Safety
- Germany - Software programming and consultancy services - Framework Agreement Direct Contributions - Lot 4: Compliance with CRA-standards and other relevant regulation
Similar tenders
Market context
- Avg. open tender · Research & development
- €3,407,559
- Buyer track record on Aperlena
- 44 notices tracked · 32 awarded
- €200,000 in awarded contracts
Never miss a tender like this
17 new notices in Research & development in Germany in the last 7 days. Get an email when new ones appear. Free.
Set up my alert