4 ms·
Someone recommended this to me on another thread and tried it yesterday and it seems very good: https://github.com/safedep/vet https://github.com/safedep/vet
by indigodaddy 1y ago
Someone recommended this to me on another thread and tried it yesterday and it seems very good:
https://github.com/safedep/vet https://github.com/safedep/vet
- politelemon 1y agoIsn't this just checking packages against known cves, which wouldn't help for undiscovered or unannounced vulnerabilities. Let me know if I've misunderstood, I'm basing off the documentation site. Also I find the irony goes hard in their recommendation of installing another attack surface (brew) on Linux and missing the point.
- knlsn 1y agoI think, they have an malware detection engine of their own, so not only they help protect from known vulnerabilityes / malwares but also have thier own database their blog: https://safedep.io/dynamic-analysis-oss-package-at-scale/ https://safedep.io/dynamic-analysis-oss-package-at-scale/