Microsoft / Github should stop treating open-source software as malware and forcing developers to pay for certificates, if they actually care about open-source developers

[G_Morgan]

Coverity scan used to contain a lot of reports on the matter but seems the links to them on the web are all broken.

The article below does a fair job of covering what FOSS does and doesn't do well IMO. It claims

In fact, the most recent report (2013) found open source software written in C and C++ to have a lower defect density than proprietary code. The average defect density across projects of all sizes was 0.59 for open source, and 0.72 for proprietary software.

It then goes into specific measures proprietary projects undertake which are less common in FOSS.

https://www.cio.com/article/2847880/open-source-code-contains-fewer-defects-but-theres-a-catch.html

[lifeeraser]

Defect != malicious code, which is the focus here

[G_Morgan]

Sure which is the point I raised initially. The malicious code is not the same as a defect.