Curiousity?

Category: open source

  • Mirroring known vulnerability data globally, for free.

    Mirroring known vulnerability data globally, for free.

    If you just want the answer to “where do I find a reliable global mirror of NVD vulnerability data?” the answer is https://cveb.in/ . It is being mirrored on the same servers used for major open source projects so you’re probably already trusting them. If you want to hear the story of how we got…

  • Best practices in practice: pre-commit

    Best practices in practice: pre-commit

    Continuing in my “best practices in practice series” : today’s tool is `pre-commit`. Using pre-commit takes a bunch of failure points out of our code quality and security process, and I highly recommend it.

  • Best practices in practice: Black, the Python code formatter

    I’m starting a little mini-series about some of the “best practices” I’ve tried out in my real-life open source software development. These can be specific tools, checklists, workflows, whatever. Some of these have been great, some of them have been not so great, but I’ve learned a lot. I wanted to talk a bit about…