Software Security

Npm-scan is a modern supply chain security tool for the npm ecosystem, offering static and behavioral analysis to catch threats that other tools like npm audit, Snyk, and Socket miss.

Composer and Packagist.org have been working on supply chain security for nearly a year, with existing measures and upcoming changes to prevent software attacks.

The curl team is facing a 4-5 times higher rate of incoming security reports, with reports being typically very detailed and long, due to AI-assisted security issues.