Pandora’s box – Exploits show package manager blind spots
As open source development has become mainstream, developers have been able to benefit from a growing number of application development and security solutions that help them build secure, high-quality software fast. Several new open source vulnerability management (a.k.a. software composition analysis) solutions have emerged, and at first glance, it can be hard to determine what differentiates them — at some level, they all claim to help you catalog your open source and show you information about the current known vulnerabilities.
Posted in Open Source Security | Comments Off on Pandora’s box – Exploits show package manager blind spots