News for hackers. Stuff that matters.

A comment on Ask HN: Does anyone investigate open source packages before using in prod?. Parent comment

Re:Ask HN: Does anyone investigate open source packages befo... by cpach on Friday June 26, 2020 @11:36AM (#23653161)
IIRC there is some kind of SaaS solution for this but right now I can’t recall its name. Maybe someone else here knows?

Edited: I reached out to some security people and it seems like the following are popular tools for this use case: Snyk / Dependabot / Whitesource.

[ Parent | on HN ]
Re:Ask HN: Does anyone investigate open source packages befo... by gitgud on Friday June 26, 2020 @12:13PM (#23653620)
Github have a security check that scans your repo's dependencies and warns you about vulnerabilities too
[ Parent | on HN ]