What’s New

GitHub — Dependabot alerts on malicious packages across more ecosystems

Dependabot alerts on malicious packages across more ecosystems

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot aler…

Added
  • Dependabot alerts now include malware advisories from the OpenSSF malicious-packages repository across more ecosystems
View original