4 ms·
The stuff they announced today on dependency security feels like a really good step. They stopped short of saying they were going to resurrect OSVDB, but not fa
by greysteil 9y ago
The stuff they announced today on dependency security feels like a really good step. They stopped short of saying they were going to resurrect OSVDB, but not far short. In the meantime, they're going to display a project's dependency graph in the insights tab, and in future will suggest fixes for any security vulnerabilities in it (i.e., insecure versions).
- alvesjtiago 9y agoThe dependency security features really do look awesome. I've been working on a project called Octotrack (http://octotrack.tiagoalves.me http://octotrack.tiagoalves.me) for a while now whose objective is exactly that with other features for dependency management (currently only available for projects that use Bundler/Gemfile). It would be great to get your feedback.