Russian companies have developed standards for a trusted repository of open-source software.

      Experts identified the key criteria for trust in open-source software:

      Technical ability to verify code builds

      Legal soundness of licensing

      Operational capability to ensure ongoing support

      Special attention was paid to the requirements for the repository operator, who must have relevant expertise, experience working with critical information infrastructure (CII), and financial stability.

      Discussion participants proposed creating a system of mutual recognition of verification results for open-source components. This will avoid duplication of effort when each company independently conducts multi-level checks of libraries, reports volga.news.

      Russian companies already possess the necessary infrastructure and expertise to implement this initiative. Planned measures include involving relevant regulators to develop transparent methodologies and creating a pilot project to develop criteria for a trusted repository.

      Creating a trusted open-source system reflects a global trend toward greater transparency and security in software. It is particularly significant that Russian companies are proposing concrete mechanisms for implementing this idea, which could become the basis for international cooperation within BRICS.