Tag: OpenSource
-
Mirroring known vulnerability data globally, for free.
If you just want the answer to “where do I find a reliable global mirror of NVD vulnerability data?” the answer is https://cveb.in/ . It is being mirrored on the same servers used for major open source projects so you’re probably already trusting them. If you want to hear the story of how we got…
-
Best practices in practice: Software release tracking and end of life
Continuing in my “best practices in practice series” : an API for finding the list of available software versions and an API for finding out if those versions are still actively supported (and for how long).
-
Best practices in practice: pre-commit
Continuing in my “best practices in practice series” : today’s tool is `pre-commit`. Using pre-commit takes a bunch of failure points out of our code quality and security process, and I highly recommend it.
-
Best practices in practice: Black, the Python code formatter
I’m starting a little mini-series about some of the “best practices” I’ve tried out in my real-life open source software development. These can be specific tools, checklists, workflows, whatever. Some of these have been great, some of them have been not so great, but I’ve learned a lot. I wanted to talk a bit about…