How to check vulnerability in development components like NPM, NuGet packages



OSS Index is a free catalogue of open source components and scanning tools to help developers identify vulnerabilities, understand risk, and keep their software safe.

Search millions of components to find any known, publicly disclosed vulnerabilities across a wide range of ecosystems.

source :- https://ossindex.sonatype.org/



Comments

Post a Comment

Popular posts from this blog

how to add meta tag elements dynamic in ASP.NET

protected void Page_Load(object sender, EventArgs e) { HtmlMeta objhtmlmeta=new HtmlMeta(); objhtmlmeta.Content = ""; objhtmlmeta.HttpEquiv = "refresh"; objhtmlmeta.Content = "10;URL=http://www.Xyzdfsdfsdfsdf.com/personal/1/searchResults.do?per=mrmls&la=EN&shcu=&cust(mtype)=res&xml=1&minprice=" + Session["MinPrice"] + "&maxprice=" + Session["MaxPrice"] + "&cu=USD&minsurface=&maxsurface=&minbedroom=" + Session["MinBedrooms"] + "&cust(garage)=&minbathroom=" + Session["MinBathrooms"] + "&minlsurface=&maxlsurface=&c_city=&cust1(d)=&cust(zipcode)=" + Session["Zip"] + "&cust(year-built)=" + Session["YearBuilt"] + "&cust(type)=&c_n_area=681&rpp=5&B1=Search"; Header.Controls.Add(objhtmlmeta); }
Read more

Defensive Programming Approach - A developer must have this skill

Image
Defensive programming is a form of defensive design intended to ensure the continuing function of a piece of software under unforeseen circumstances. Defensive programming practices are often used where high availability, safety or security is needed — Wikipedia Defensive programming techniques are used especially when a piece of software could be misused mischievously or inadvertently to catastrophic effect. # Defensive programming is an approach to improve software and source code, in terms of: # General quality – reducing the number of software bugs and problems. # Making the source code comprehensible – the source code should be readable and understandable so it is approved in a code audit. # Making the software behave in a predictable manner despite unexpected inputs or user actions Key points in order to achieve a Defensive Programming approach.These are as follows. 1.Don’t trust developers 2.Never trust user input 3.Use database abstraction 4.Don’t ...
Read more

Inno Setup - Free installer for Windows programs

Image
  I nno Setup is a  free  installer for Windows programs/script that is very simple to use it and create a installer for distribution. It provides  Support for every Windows release since 2006, including: Windows 10, Windows 10 on ARM, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 8, Windows Server 2012, Windows 7, Windows Server 2008 R2, Windows Server 2008, and Windows Vista. Once you download and Install on your machine you can easily use Inno setup user interface and create installer very easily and quickly.It is different to use in the respect that as it is not integrate with Visual studio. To create Installer you need to launch inno Setup Compiler and give you *.exe,images and other files references to it .There are two option for creating this installer through inno setup compiler one is Wizard based and other is Script based. Download :- https://jrsoftware.org/
Read more