Dependency Management

Package Management Version Control Security Practices Upgrades Vulnerabilities Locking Mechanisms Virtual Environments Supply Chain Security Remote Dependencies Vulnerability Intelligence

3 ARTICLES

last wk.

Broadcom Bolsters Spring Security as It Pushes into AI Inference Infrastructure

The company is aiming to cut enterprise supply‑chain risk by giving customers early CVE fixes and tamper‑resistant build provenance for Java dependencies.

7 ARTICLES

last mo.

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

12 ARTICLES

2mo ago

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

3 ARTICLES

2mo ago

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

3 ARTICLES

4mo ago

Sonatype Report Flags Industrialized Open‑Source Malware as Downloads Reach 9.8 Trillion

4 ARTICLES

4mo ago

Model Context Protocol Sets Out Practical Path to Standardize AI Tool Use

7 ARTICLES

7mo ago

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages