Video
Why We Need Static Analysis When Prioritizing Vulnerabilities - Webinar
Plugins to package managers primarily rely on making recommendations to developers by analyzing build manifests in projects. Metadata analysis is typically insufficient for making quick decisions on whether a project is affected by a security or performance bug. Hundreds of hours goes into testing and manual code reviews to determine whether a project is affected.
- How dependency management works
- Alert fatigue caused by noisy security tools
- Program analysis for SCA
Written by
Joseph Hejderup
Published on
December 6, 2022
Updated on
August 25, 2025
Topics
