Skip to content
What does your code use, and is it vulnerable? It-depends!
blog.trailofbits.com | blog | #supply-chain | #open-source | #vulnerability-detection | #sbom | #dependency-analysis | #it-depends
Summary
it-depends builds an SBOM for a source repository, covering cargo, npm, pip, Go, CMake, and autotools, and flags reachable CVEs by exploring every feasible dependency resolution.
- Published
- Collected