Tidelift
Tidelift, now part of Sonar, provides software supply chain security solutions that help organizations manage risks from open source software. It partners with open source maintainers, paying them to follow secure development practices, and supplies human-validated data on vulnerabilities, licensing, and maintenance of open source packages.www.tidelift.com
2
MENTIONS
2
EPISODES
2
PODCASTS
Search complete. 2 mentions across 2 episodes found for "Tidelift".
Oct 15, 2026
Josh BressersGUEST
Then there's the open source, like the projects, the people working on this stuff, and they're being overwhelmed right now, and so I think they are breaking today.
Josh BressersGUEST
And I, I have a statistic in my, my talk I'm gonna give later where there was a company called Tidelift.
Josh BressersGUEST
They've been since acquired, um, by Sonar, SonarSource, uh, acquired them.
Josh BressersGUEST
But they did, they used to do this yearly survey of open source developers, and the last one they did was in 2024, and basically they would ask developers, like, "How are you doing? Are you over...
Mark EriksonHOST
The only way that we would ever get like a quote meaningful amount of money flowing to open source maintainers would be if the registries themselves start charging companies and just redistributing the money automatically.
Mark EriksonHOST
There's already third-party tools like Tidelift and thanks.dev, which have the same logic, but it's still from voluntary donations.
Mark EriksonHOST
So what would happen if NPM itself just said, yep, if you want to use NPM, you got to pay up if you're a big company.
Mark EriksonHOST
And then they just automatically send that out.