Software Composition Analysis

What’s in Your Code?

Topics
Software Monetization Software Composition Analysis Software Installation

Software Composition Analysis

Spring4Shell: Deep breath. Don’t panic. Mitigate.

Software Composition Analysis

Log4j: Come out, come out wherever you are!

Software Composition Analysis

Open Source: Trouble because of sudden license changes

Software Composition Analysis

The story behind colors.js and faker.js

Software Composition Analysis

FTC warns about failure to protect against vulnerabilities

Software Composition Analysis

Software supply-chain vulnerabilities: A close look on code

Software Composition Analysis

What you need to know about the Log4j security vulnerability

Software Composition Analysis

When is the right time to conduct an open source audit?

Software Composition Analysis

Field Notes: Understanding GPL Linking Exceptions