3 ms·
I always find this question interesting. Is there a money to be made in a company that main purpose would be to provide periodic check on the source code depen
by elashri 3y ago
I always find this question interesting.
Is there a money to be made in a company that main purpose would be to provide periodic check on the source code dependencies. So that for a certain amount of payment, you get to submit a list of dependencies and they monitor the source code and give a report with that changes, problems and security issues. So it is like a Source code check as a service.
- zemnmez 3y agoI think this is what WhiteSource does. (it's also apparently called Mend now)
- capableweb 3y agoNot only are the products confusing (which one does what parent mentioned?) but that pricing is out of reach for so many I'm wondering if the company is actually real or not? Cheapest plan starts at 1333 USD per month!
- dist-epoch 3y agoIf you are a big corp a security leak costs you 10 mil USD, it might make sense to pay. Instead of paying $50k for a one time security audit, you get a part of it in the form of a subscription.