Archive
Software Composition
-
Transitive Dependencies: How much can you trust friends of your friends?
[vc_row][vc_column width=”1/1″][vc_column_text]Friends of your friends are not necessarily your friends. In this post, we’ll see why it is important to get visibility on dependencies…
-
Good practices when defining the scope of a code scan
[vc_row][vc_column width=”1/1″][vc_column_text]In this post, we have compiled a few good practices to keep in mind when scanning a code base with CAST Highlight in…
-
Software Composition in Highlight: How Open Source component detection works
[vc_row][vc_column width=”1/1″][vc_column_text]CAST consolidates a unique database made of 94M+ Open Source components and 9B+ file fingerprints. This article details the concept and steps in…
-
How OSS licenses are mined and detected in Highlight’s Software Composition Analysis feature
[vc_row][vc_column width=”1/1″][vc_column_text]CAST has developed unique algorithms to mine and detect licenses from Open Source components to let you get a (more accurate) sense of…