New product line provides a catalog of the 20,000 most popular Java projects with end-to-end integrity, furthering Chainguard’s mission to be the safe source for open source “Developers need a better ...

The vast majority of security vulnerabilities in open-source projects reside in indirect dependencies rather than directly and first-hand loaded components. "Aggregating the numbers from all ...

Secure software supply chain solution provider Chainguard Inc. today announced Chainguard Libraries, a new product line that offers secure language libraries for Java built directly from source in ...

In a blog post titled "Fifty Shades of JAR: A Love Story Between Devs and CVEs," the Hopper team analyzed more than 16 million Java artifacts from Maven Central, uncovering a widespread industry blind ...

Community driven content discussing all aspects of software development from DevOps to design patterns. Apache Maven is a Java build tool and dependency management engine that simplifies the ...

Open source consumers are downloading about 1.2 billion known vulnerable Java dependencies every month, and whether out of lack of attention, ignorance, stress and overwork or something else, 96% of ...

JArchitect provides valuable analysis and information, but the cost means this is not a casual purchase, if you’re spending your own money and not your company’s. Once you get past “Hello World,” code ...