News for hackers. Stuff that matters.
Re:Malicious crossenv package on npm by danjoc on Tuesday August 01, 2017 @11:55PM (#14907789)
Yes

https://github.com/s4u/pgpverify-maven-plugin

There's also this,

https://jeremylong.github.io/DependencyCheck/dependency-chec...

Because you want to know when a dependency has a vulnerability, even when the developers are legit.

There are no comments on this comment yet.