1.Aikido acquires Root to secure the supply chainblog | 2026-06-30 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source
2.Open Source Vulnerability Management: Fixing Dependency Risk Without Alert Fatigueblog | 2026-06-28 07:00 | bugbunny.ai | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source
3.Everybody's shipping code they can't readblog | 2026-06-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
4.Software Supply Chain Security: Protecting the Path From Commit to Productionblog | 2026-06-23 07:00 | bugbunny.ai | Original ↗ | .md | #supply-chain | #devsecops | #ci-cd
5.Software Composition Analysis: Beyond Dependency CVE Listsblog | 2026-05-28 07:00 | bugbunny.ai | Original ↗ | .md | #supply-chain | #vulnerability-management | #devsecops
6.Practical Package Security: The Unofficial Guideblog | 2026-05-04 14:00 | wiz.io | Original ↗ | .md | #supply-chain | #devsecops | #npm
7.Stop Policies From Breaking Your Buildsblog | 2026-03-25 14:14 | jfrog.com | Original ↗ | .md | #supply-chain | #devops | #jfrog
8.The Dependency Dilemma: Balancing Innovation Speed with Supply Chain Resilienceblog | 2026-03-11 14:49 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #resilience
9.SCA Everywhere: Scan and Fix Open-Source Dependencies in Your IDEblog | 2025-11-28 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #aikido
10.Top 10 Python Security Vulnerabilities Developers Should Avoidblog | 2025-10-05 00:00 | aikido.dev | Original ↗ | .md | #secure-coding | #python | #aikido
11.Supply Chain Security: The Ultimate Guide to Software Composition Analysis (SCA) Toolsblog | 2025-10-02 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #open-source | #cve
12.NPM Security Audit: The Missing Layer Your Team Still Needblog | 2025-08-13 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #npm | #audit
13.Why Securing Bazel Builds is So Hard (And How to Make It Easier)blog | 2025-08-11 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #aikido | #sca
14.Why is NPM Fetching a Dependency Not in My package-lock.json?blog | 2024-01-25 06:59 | hackerone.com | Original ↗ | .md | #supply-chain | #npm | #package-management
15.Avoiding the Hazards of Dependencies - Part 2blog | 2020-08-03 01:00 | hackerone.com | Original ↗ | .md | #supply-chain | #ios | #best-practices
16.Avoiding the Hazards of Dependencies - Part 1blog | 2020-07-28 01:00 | hackerone.com | Original ↗ | .md | #supply-chain | #android | #ios
17.Using FOSSA for License Complianceblog | 2018-08-09 08:45 | hackerone.com | Original ↗ | .md | #open-source | #legal | #due-diligence