I am working on a next-gen software composition analysis tool that can identify ...

abhisek on June 30, 2025 | parent | context | favorite | on: Ask HN: What Are You Working On? (June 2025)

I am working on a next-gen software composition analysis tool that can identify malicious open source packages through code analysis. Adopts a policy as code (CEL) approach to build security guardrails against risky OSS components using opinionated policies.

GitHub: https://github.com/safedep/vet