Learn

Learn about software supply chain security and Endor Labs.

Featured resources

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)
Blog

Critical SQL Injection Vulnerability in Django (CVE-2025-64459)

Nov 6, 2025
State of Dependency Management 2025
Ebook/Report

State of Dependency Management 2025

Nov 4, 2025
A virus-like npm malware attack has spread to 180+ packages so far, including CrowdStrike and Tinycolor.
Blog

npm Malware Outbreak: Tinycolor and CrowdStrike Packages Compromised

Sep 16, 2025
AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale
Ebook/Report

AI Security Code Review: A Multi-Agent Approach for Detecting Security Design Flaws at Scale

Apr 23, 2025
Show filters
Topic
Medium
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
SCA
Open Source
Introduction to Open Source Security
Video

Introduction to Open Source Security - Webinar

Feb 3, 2023
SCA
Open Source
Comparing SBOMs Generated at Different Lifecycle Stages
Video

Comparing SBOMs Generated at Different Lifecycle Stages - Webinar

Feb 3, 2023
Security
Compliance & SBOM
SBOM vs. SBOM: Comparing SBOMs from different tools and lifecycle stages
Blog

SBOM vs. SBOM: Comparing SBOMs from Different Tools and Lifecycle Stages

Feb 2, 2023
Developer Productivity
Security
What breaking changes teach us about security
Blog

What Breaking Changes Teach Us about Security

Jan 31, 2023
Compliance & SBOM
Open Source Licensing Simplified: A Comparative Overview of Popular Licenses
Blog

Open Source Licensing Simplified: A Comparative Overview of Popular Licenses

Jan 24, 2023
Security
Compliance & SBOM
What is VEX and why should I care?
Blog

What is VEX and Why Should I Care?

Jan 18, 2023
Security
Open Source
Malware
Whatfuscator, malicious open source packages, and other beasts
Blog

Whatfuscator, Malicious Open Source Packages, and Other Beasts

Jan 9, 2023
Security
Exploring Risk: Understanding Software Supply Chain Attacks
Blog

Exploring Risk: Understanding Software Supply Chain Attacks

Jan 5, 2023
News
Endor Labs and Intuitive partner to help enterprises leverage open source software most securely and effectively
Blog

Endor Labs and Intuitive Partner to Help Enterprises Leverage OSS

Jan 2, 2023
SCA
Security
What is reachability-based dependency analysis?
Blog

What is Reachability-Based Dependency Analysis?

Dec 21, 2022
SCA
Security
Open Source
State of Dependency Management 2022
Ebook/Report

State of Dependency Management 2022

Dec 8, 2022
SCA
Open Source
Why We Need Static Analysis When Prioritizing Vulnerabilities
Video

Why We Need Static Analysis When Prioritizing Vulnerabilities - Webinar

Dec 6, 2022
Security
What are Maven dependency scopes and their related security risks?
Blog

What are Maven Dependency Scopes and Their Related Security Risks?

Nov 29, 2022
Security
Compliance & SBOM
Open Source
The Government's Role in Maintaining Open-Source Security
Blog

The Government's Role in Maintaining Open Source Security

Nov 21, 2022
SCA
Security
Introduction to Program Analysis
Blog

Introduction to Program Analysis

Nov 17, 2022
News
More Than 30 Industry-Leading CISOs Personally Invest in Endor Labs
Blog

More Than 30 Industry-Leading CISOs Personally Invest in Endor Labs

Nov 9, 2022
News
SCA
From cloud security to code security: why we've raised $25M to take on OSS dependency sprawl
Blog

From Cloud Security to Code Security: Why We've Raised $25M to Take on OSS Dependency Sprawl

Oct 11, 2022
News
Open Source
Endor Labs Launches with $25M Seed Financing to Tackle Massive Sprawl of Open Source Software (OSS)
Blog

Endor Labs Launches with $25M Seed Financing to Tackle Massive Sprawl of Open Source Software (OSS)

Oct 10, 2022
Security
Compliance & SBOM
SBOMs are just a means to an end
Blog

SBOMs are Just a Means to an End

Sep 13, 2022
Security
Open Source
Introducing the OpenSSF Scorecard API
Blog

Introducing the OpenSSF Scorecard API

Sep 8, 2022
Developer Productivity
How to get the most out of GitHub API rate limits
Blog

How to Get the Most out of GitHub API Rate Limits

Aug 21, 2022
no-results
Sorry, no results matching your search.

Want to stay in the loop?

Sign up for our newsletter.

Welcome to the resistance
Oops! Something went wrong while submitting the form.