Software composition analysis (SCA) tools have long been a popular way to identify security and licensing issues with open source packages. While ...
Last week, Tidelift CEO and co-founder Donald Fischer explored why software composition analysis (SCA) tools alone are not enough to robustly address ...
Fact: most application developers love open source because it makes them more productive. Also a fact: Open source brings with it some security and ...
Last week, in a response to the ever-growing list of software supply chain attacks (SolarWinds and Log4Shell specifically), the U.S. National ...
50 Milk St, 16th Floor, Boston, MA 02109
.svg){kind=icon}