Tags : Browse Projects

Discover, assess and mitigate known vulnerabilities in your Java and Python projects Eclipse Steady supports software development organizations in regards to the secure use of open-source components during application development. The tool analyzes Java and Python applications in order to: - ... [More] detect whether they depend on open-source components with known vulnerabilities, - collect evidence regarding the execution of vulnerable code in a given application context (through the combination of static and dynamic analysis techniques), and - support developers in the mitigation of such dependencies. [Less]

A framework for defining ratings for open-source projects. In particular, the framework offers a security rating for open-source projects that may be used to assess the security risk that comes with open-source components.