Viewing profile — TheRealBrianF

I think you're obliquely referring to me there. I covered some of this in one of my previous blogs where i talked about the systemic challenges here that I've uncovered. The heavy …

You're referring to what I described previously here... ironically back when the first dependency confusion research was published: https://www.sonatype.com/blog/why-namespacing-ma…

Sonatype Lifecycle is designed to analyze a built package and figure out what's inside it, specifically when there aren't manifest files to tell you what's -supposed- to be there. …