Brian Fox - Co-founder & CTO at OpenSSF

Brian Fox

Co-founder & CTO at OpenSSF

New Hampshire, United States

Join Prog.AI to see contacts

Summary

👤

Senior

🎓

Top School

Brian Fox is a proven technology leader and co-founder/CTO of Sonatype with over 20 years building developer tools and supply-chain security for organizations from startups to global enterprises. Deeply embedded in the Apache Maven ecosystem, he authored and maintained cornerstone plugins like maven-dependency-plugin and maven-enforcer-plugin and helps steward Maven Central, the world’s largest Java component repository that now exceeds a trillion downloads annually. He blends hands-on backend Java development—evident in extensive Apache contributions and work improving OWASP dependency-check analyzers—with product and engineering leadership across Sonatype since 2007. An active open-source and policy contributor, Brian serves on the OpenSSF and FINOS governing boards and has helped shape national OSS cybersecurity responses and consumption best practices. He communicates complex supply-chain security ideas to technical and policy audiences, including publishable thought leadership that applies manufacturing lessons to software supply chains. Based in New Hampshire, he pairs practical engineering chops with a rare combination of community stewardship and public-sector influence.

20 years of coding experience

21 years of employment as a software developer

Presenting Data and Information, Presenting Data and Information at Edward Tufte Courses

Certified Scrummaster, Certified Scrummaster at Bigvisible

BS CS, BS CS at Daniel Webster College

Github Skills (24)

dependency-management10

package-management10

dependency-analysis10

plugin-development10

audit10

maven-plugin10

software-composition-analysis10

java10

javas10

read-me10

maven10

version-control10

build-management10

auditing10

documentation10

Programming languages (16)

JavaC++CSSScalaMakefileVueGoHTML

Github contributions (5)

apache/maven-dependency-plugin

Apr 2006 - Mar 2013

Apache Maven Dependency Plugin

Role in this project:

Backend Developer

Contributions:221 commits in 7 years

Contributions summary:Brian applied several patches to the Apache Maven Dependency Plugin, primarily addressing issues and adding functionality. The contributions focused on improving the logging of dependency status, enhancing the filtering of dependencies by scope, and adding options to output artifact filenames. The user's work improved the plugin's usability and diagnostic capabilities.

maven-dependency-pluginmavenjavabuild-managementmaven-plugins

apache/maven-enforcer

Sep 2007 - Nov 2010

Apache Maven Enforcer (Plugin)

Role in this project:

Back-end Developer

Contributions:119 commits in 3 years 2 months

Contributions summary:Brian primarily worked on refactoring and restructuring the `apache/maven-enforcer` project, as indicated by the commit messages "Moved remotely" and "more refactor." These changes involved moving and modifying source code, updating API interfaces, and adjusting dependencies within the Maven build system. Furthermore, the user added functionality to enforce plugin versions by implementing rules that validate and enforce proper versioning of plugins.

mavenbuild-managementjavamaven-pluginsmaven-enforcer-plugin

Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.

Request Free Trial