Broadcom pledges to lock down open source Python, Java libraries

{
  "signal_id": "693f7224-3afd-d993-d449-1e6f4598ada7",
  "signal_type": "news",
  "signal_subtype": "is_developing",
  "detected_at": "2026-08-31T16:32:00+00:00",
  "company": {
    "name": "Broadcom",
    "domain": "broadcom.com"
  },
  "data": {
    "url": "https://www.theregister.com/virtualization/2026/08/31/broadcom-pledges-to-lock-down-open-source-python-java-libraries/5293454",
    "title": "Broadcom pledges to lock down open source Python, Java libraries",
    "excerpt": "virtualization Promises ‘secure artifacts’ for Spring and RabbitMQ, and other projects that matter to its Tanzu suite Broadcom has decided to take responsibility for the security of some important open-source software, namely the Spring Java application framework and RabbitMQ. Australian developer Rod Johnson created the precursor to Spring in 2002, then found collaborators to tread the well-worn path towards monetizing open source software by starting a company called SpringSource to offer support and services for their creation. VMware acquired SpringSource and made it part of its Pivotal Software joint venture with EMC. Pivotal went on to pioneer the approaches to software development that became microservices and cloud-native computing. Much of the software Pivotal created later became part of VMware’s Tanzu brand. The Tanzu Kubernetes Grid lives on as the vSphere Kubernetes Service that adds support for containerized apps to VMware’s flagship Cloud Foundation suite. Broadcom also runs a Tanzu division which sells the VMware Tanzu Platform, a bundle that includes platform-as-a-service tools and a Spring implementation. Because Spring is FOSS, the Tanzu division contributes heavily to the many open-source components that comprise it, and to other FOSS projects often used in Spring implementations. The new TrueSource by Broadcom offering, announced today ahead of VMware’s...",
    "product": "TrueSource",
    "summary": "Broadcom announced a new offering, TrueSource, which will identify and secure key open-source components for users of the Spring framework and other ecosystems like Python and Node.js.",
    "planning": true,
    "image_url": "https://image.theregister.com/5258559.jpg?imageId=5258559&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 0.9,
    "product_data": {
      "name": "TrueSource",
      "full_text": "The new TrueSource by Broadcom offering",
      "fuzzy_match": false
    },
    "product_tags": [
      "security",
      "general_technology"
    ],
    "published_at": "2026-08-31T16:32:00Z",
    "article_sentence": "The new TrueSource by Broadcom offering, announced today ahead of VMware’s annual Explore conference, will see the company identify key components that Spring users rely on and work to ensure that they are secure."
  }
}

curl https://signals.autobound.ai/v1/signals/693f7224-3afd-d993-d449-1e6f4598ada7 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"broadcom.com","limit":20}'