SafeDep Vet - Open Source software supply chain dependency risks

safedep.io

2 pointsmadhuakula2 comments

SafeDep vet is a tool for identifying risks in open source software supply chain. It helps engineering and security teams to identify potential issues in their open source dependencies and evaluate them against organizational policies.

How that compares to https://trivy.dev, https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck and other tools?

Reply on news.ycombinator.com