BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//open-source-conference-luxembourg-2026//sp
 eaker//BUDJFG
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251007T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Securing the Software Supply Chain with Software Heritage - Stefan
 o Zacchiroli
DTSTART;TZID=Europe/Luxembourg:20261007T143000
DTEND;TZID=Europe/Luxembourg:20261007T150000
DTSTAMP:20260916T160801Z
UID:pretalx-open-source-conference-luxembourg-2026-KGYC3C@pretalx.com
DESCRIPTION:Modern software is built on open source: an estimated 96% of p
 roducts ship open source components. This ubiquity has turned the open sou
 rce supply chain into a prime target for attackers\, who increasingly comp
 romise “leaf packages” - under-maintained\, indirect dependencies buri
 ed deep in dependency trees\, often looked after by lone volunteers withou
 t institutional backing. Incidents like the xz-utils backdoor have shown h
 ow fragile this foundation can be\, and how high the stakes are for public
  administrations and critical infrastructure alike.
LOCATION:CyberSecurity
URL:https://pretalx.com/open-source-conference-luxembourg-2026/talk/KGYC3C
 /
END:VEVENT
END:VCALENDAR
