Blogs
Nixpkgs: How to Build Better, More Open Software
The world we know today depends in fundamental ways on open source software. As providers of this software, package managers serve their respective ecosystems from their centralize…
Blogs
From Static Scans to Runtime Awareness: The Next Phase of Software Supply Chain Security
A growing wave of software supply chain attacks, including Shai-Hulud, Axios and LiteLLM, is exposing weaknesses in conventional security tooling. Malicious open-source packages can execute harmful code during installation, often…