Free tool helps developers spot open source security risks

The use of open source components in development projects is commonplace, but vulnerabilities in these components can be easily overlooked and leave the resulting applications insecure. Open source security and license compliance management company WhiteSource is aiming to make it easier for developers to spot problems in components with the launch of a free tool. WhiteSource Bolt is designed to fit into a developer's natural ecosystem, allowing software development teams to close the gap that exists between code development and security teams. Additionally, it increases developers' ability to work more efficiently with open source components by alerting in real-time once… [Continue Reading]