Web-based Git hosting service facilitating collaboration, with features like issue tracking, social networking, and wikis for project management.
United States
Securing open-source package ecosystems by originating, validating, and augmenting build attestations.
United States
Software supply chain attacks are on the rise and with it, the need to build transparent, evidence-based trust in software.
Most security teams don't have a detection problem, they have a sprawl problem. A dozen scanners each flag their own slice of risk, findings pile up without shared context, and nobody can say with confidence which alert actually matters this week.
Spain
EU
Patchdex is a vulnerability database and package analysis tool. It provides instant security verdicts (RED, YELLOW, GREEN), checks for active malware, flags unpatched CVEs, and monitors maintainer health (abandonware, bus factor) to help developers choose safe dependencies.
