GitHub — Dependabot alerts on malicious packages across more ecosystems

Dependabot alerts on malicious packages across more ecosystems

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot aler…

Added 1
  • Dependabot alerts now include malware advisories from the OpenSSF malicious-packages repository across more ecosystems
View original

Upgraded? How did it go?

Discussion