Newsletter #004: Open Source security moves & Stage time 🎙️

Recent open source security efforts include a new security policy for Yeoman, updates to Express.js vulnerability reporting, and upcoming talks at Node Congress and DevSecCon on threat modeling and securing the software supply chain. A sponsor-only repo is also in the works for focused discussions and newsletter archives.