Viewing profile — JakeMimoni

“Many eyes" in theory is perfect, but, in practice the "eyes" tend to focus only on the top 1% of packages, and those specifically with corporate sponsorship. But it is possible to…

might not have explained it the best I could have haha.. It means as you pull packages in from NPM et al, the analysis goes to work, telling you of any known vulnerabilities, or an…

we made a tool that automates that process - https://trustd.dev it will analyse open-source packages as you install them and tell you of any vulnerabilities before they are even on…

We just recently launched a free tool that helps python developers prevent exactly these type of issues. Feel free to check it out: https://trustd.dev we work preventatively, so as…

trustd.dev now supports python! trustd is a free tool that helps developers consume open-source code in a safe way, identifying issues in the code before you even install it, savin…