npm manifest confusion – what is it and do you really need to worry about it?
Read More...
Rule Over Your Dependencies and Scan at Your Own Open Source Risk
5 minute read time
A good way to make sure that your organization's vulnerabilities don't go unnoticed is conducting regular scans of open source used in your environments.
Read More...
Why Are Dependency Confusion Attacks Not Going Away?
4 minute read time
Sonatype has caught more than 63,000 suspicious packages, the majority of which are dependency confusion candidates. Why are these attacks not going away?
Read More...
PyPi 'Cheese Shop' Malware Illustrates Software Supply Chain Risk Vector
3 minute read time
Malicious actors circumvented the PyPI package repo manager, a classic case demonstrating why understanding open source code dependencies is critical.
Read More...
Adding Dependencies Using m2eclipse
1 minute read time
Adding Dependencies Using m2eclipse
Read More...