OSV-SCALIBR: A library for Software Composition Analysis

Posted by Erik Varga, Vulnerability Management, and Rex Pan, Open Source Security Team

<

div>

In December 2022, we announced OSV-Scanner, a tool to enable developers to easily scan for vulnerabilities in their open source dependencies. Together with the open source community, we’ve continued to build this tool, adding remediation features, as well as expanding ecosystem support to 11 programming languages and 20 package manager formats. 

Today, we’re excited to release OSV-SCALIBR (Soft

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.