Mend.io Blog

Top tips for starting with a software composition analysis solution. Build a team, set goals beyond scanning, understand the data model, make policies work, start small.

All you need to know about Open Source Copyleft Licenses. Learn about the history, benefits, and considerations of using copyleft licenses.

Learn how to expose ports in Docker with different networking rules. Understand the differences between EXPOSE, --expose, -P, and -p flags.

Learn how to prioritize software security vulnerabilities effectively to ensure your team is addressing the most urgent threats first.

Learn about the main features of Eclipse SW360, an open source tool to manage software components.

Get answers to the top 10 Common Development and Distribution License questions. Learn about CDDL terms, compatibility, and more.

Learn how to use Go Modules for efficient Golang dependency management. Simplify package management, updating, and removal in your Go apps.

Learn why manually tracking open source components is futile and how automation through software composition analysis can help manage licenses.

Learn all about black box testing in application security & quality assurance. Discover techniques, & tools and more.

Discover the top 7 questions to ask when evaluating a Software Composition Analysis solution for managing open source components.

Discover the top 9 code review tools for clean and secure source code, essential for detecting errors and defects before production.

Discover the top open source vulnerability databases beyond NVD. Learn how to track and remediate vulnerabilities in your software.

Learn how to reinstall NPM and Node.js on Windows, macOS, and Linux to avoid performance issues. Follow step-by-step guides.

Learn why patch management is crucial for application security and how to implement it effectively. Discover best practices, tools, and more.

Discover the top 10 Microsoft Public License (Ms-PL) questions answered on this blog. Learn about terms, copyleft, compatibility, and more.

Learn about the differences between security scanning and runtime protection in application security testing. Explore tools and tech.