Open Source Software Security

cdn.activestate.com·há 3 meses

The AI Coding Problem No One Is Governing

Dependency cooldowns reduce blast radius — but they're not a sourcing strategy. Learn why software supply chain security requires provenance and governance, not just patience. The post The AI Coding P

cdn.activestate.com·há 4 meses

When “Secure by Default” Only Works in One Tool, You Don’t Have a Governance Model

AI coding assistants are making dependency decisions faster than your team can review them. A tool-level integration only governs the developers who use that tool. Here's what a complete open source g

cdn.activestate.com·há 3 meses

The Vulnerability Database Security Teams Depend On Just Hit a Structural Ceiling

NIST can no longer enrich all CVEs. If your security program depends on NVD data for prioritization, you now have a documented gap in your severity data. Here's what that means for your team. The post

activestate.com·há 4 meses

The Quiet Foundation of AI-Native Development

Master Java dependency management with ActiveState. Move beyond Maven and Gradle to achieve environment hermeticity, proactive conflict resolution, and end-to-end security. The post The Quiet Foundati

cdn.activestate.com·há 4 meses

Your Open Source Governance Program Is Already Behind. Here’s How Far.

Most open source software security failures aren't caused by a lack of tooling — they're caused by governance programs that haven't kept pace with how open source is actually consumed. The post Your O

activestate.com·há 4 meses

Your Open Source Governance Program Is Already Behind. Here’s How Far.

Most open source software security failures aren't caused by a lack of tooling — they're caused by governance programs that haven't kept pace with how open source is actually consumed. The post Your O

cdn.activestate.com·há 5 meses

If You Use axios, Stop What You’re Doing

Learn how to detect and remediate zero-day vulnerabilities across the software lifecycle and reduce exposure before disclosure. The post If You Use axios, Stop What You’re Doing appeared first on Acti

activestate.com·há 5 meses

If You Use axios, Stop What You’re Doing

Learn how to detect and remediate zero-day vulnerabilities across the software lifecycle and reduce exposure before disclosure. The post If You Use axios, Stop What You’re Doing appeared first on Acti

The AI Coding Problem No One Is Governing

When “Secure by Default” Only Works in One Tool, You Don’t Have a Governance Model

The Vulnerability Database Security Teams Depend On Just Hit a Structural Ceiling

The Quiet Foundation of AI-Native Development

Your Open Source Governance Program Is Already Behind. Here’s How Far.

Your Open Source Governance Program Is Already Behind. Here&#8217;s How Far.

If You Use axios, Stop What You’re Doing

If You Use axios, Stop What You&#8217;re Doing

Your Open Source Governance Program Is Already Behind. Here’s How Far.

If You Use axios, Stop What You’re Doing