Mend.io Blog

Learn how to create an effective open source policy template with 3 key points to ensure compliance and enforcement.

Discover the top open source projects for junior developers to hone their coding skills. From Apache Commons to Google Guava, & more.

Equifax breach review reveals vulnerabilities in Apache Struts are still unpatched by many companies. Learn why remediation is crucial.

Learn how to use Renovate to keep your repositories up-to-date. Self-hosting instructions provided. Beta support available.

Discover the top 5 open source vulnerabilities that still haunt developers. Learn how to protect your applications from security threats.

DevOps and DevSecOps are a generation apart from each other, representing a natural evolution to the integration of automated security into the DevOps movement.

Explore the pros & cons of dual licensing for open source components. Learn how it works, its benefits, challenges, & compliance requirements.

Learn how to configure file matching with Renovate to keep Docker dependencies up-to-date in manifests.

Discover the top 8 due diligence questions to prepare your startup for investment. From technology roadmaps to scalability.

Renovate supports raising Pull Requests immediately for any JavaScript or Python package identified as having a vulnerable version by GitHub’s Vulnerability Alerts.

Discover and dispel 6 common concerns around using open source software in applications. Learn how to mitigate risks and harness its power.

Renovate allows raising issues to warn a repository if it is using deprecated npm packages. This helps prevent that a dependency you are using may never get updates again.

Learn about the flaws in the Common Vulnerability Scoring System and how it may impact security professionals.

Learn about vulnerability disclosure and how to find bugs in your code before hackers do.

Learn why using components with known vulnerabilities is a major issue in application security and how to address it with OWASP guidelines.

Explore 7 groundbreaking Chinese open source projects like Vue and Dragonfly.