SWESPOT

Dependency and Supply Chain Risk

Lockfiles, provenance, audit tooling, and the transitive dependency nobody has read.

1 article