Vet is an open source tool designed to help developers and security engineers spot risks in their software supply chains. It goes beyond traditional software composition analysis by detecting known vulnerabilities and flagging malicious packages. Vet supports several ecosystems, including npm, PyPI, Maven, Go, Docker, and GitHub Actions, making it useful across many types of projects. One of Vet’s key features is its use of real-time malicious package detection, powered by SafeDep Cloud. It also … More →

The post Vet: Open-source software supply chain security tool appeared first on Help Net Security.