3 ms·
Does it recognize hashes of proprietary (closed source, minified) files too?
by thih9 5y ago
Does it recognize hashes of proprietary (closed source, minified) files too?
- allendoerfer 5y agoNope, it does not. If you remove the comment at the beginning of an unminified JS file, it will not recognize it as outdated anymore. You should treat WhiteSource as something that can potentially help to find problems, but it will by no means grant you security on its own. It is an enterprise tool to help people check boxes.
- TecoAndJix 5y agoWe leverage it mainly to confirm license compliance but the package vuln notifications are nice