4276 articles
4276 ARTICLES
The best solution for known vulnerabilities is to upgrade your software. But sometimes there’s not a security update immediately available. The next best solution is to patch your software. In this post, we go through four ways to find security patches for open source software.
Open source maintainers give up their own time to create great pieces of free software, which we then use to create business value. In our State of Open Source Security Report, open source consumers and maintainers were asked about their security expertise, actions and sense of ownership — and the results were very mixed.
Locking or “pinning” dependencies is a widespread best practice in Ruby, Python, and other ecosystems. In Node.js locking was much less widespread, until recently, thanks to the improvements provided by package-lock.json and yarn.lock. This post discusses how each of these solutions works and why you may want to use them.
Stop building security tools that think about development, and start building development tools that handle security.
The Snyk API gives you access to all the issues associated with a given project. In this post, you’ll learn how to use the API to fetch the organisations you have access to, the projects for a given organisation, and all the issues for a given project.
Snyk has always been committed to making it easy to use open-source code without compromising security. Today, we’re taking another leap forward and launching support for .NET, Go and PHP!
Understand GraphQL schema delegation and how schema stitching combines multiple services into a unified GraphQL API.
Learn how GraphQL remote schemas work and how schema stitching can combine data from multiple GraphQL services.
Bower is no longer the dependency manager of choice for front-end projects. While the open source project is still maintained, its creators decided to deprecate it, and have advised how to migrate to other solutions. In this post, we explain why Bower used to be great, list six reasons why it isn’t necessary anymore, and explain how to move on to newer and better technologies.
Learn how the network layer controls request handling, transport, and execution flow in GraphQL server implementations.
Learn how to enable CORS in Express-GraphQL and Apollo Server so browser clients can safely call your GraphQL API across origins.
Last week, we released our first annual State of Open Source Security report. One of the discoveries the report mentions is that an analysis of around 433,000 sites found that 77% of them use at least one front-end JavaScript library with a known security vulnerability. In this post, we take a deep dive into that problem space.