• +1.800.374.4353
  • Contact Us
  • Search
  • revenera.de
Revenera
Revenera
  • Search
    • Search
  • Blog
    • Software Installation
    • Software Composition Analysis
    • Software Monetization
  • Install
  • Protect
  • Monetize
  • Resources
  • About Us
  • Revenera.com
    • Homepage
    • Install
    • Protect
    • Monetize
    • Resources
    • About Us
  • Community
  • flexera.com
  • BLOG
  • Software Installation
  • Software Composition Analysis
  • Software Monetization
  • Subscribe
    • Get updates delivered to your inbox:

    • Follow Us:  

Software Composition Analysis – What’s in Your Code?

What’s Trending with SBOMs, Developers, and Code Scanning

Those involved in the world of software development are used to continuous change, high expectations, and industry interruptions that require constant pivoting, but the last couple of years have chall…

May 19, 2022 Alex Rybak

Spring4Shell: Deep breath. Don’t panic. Mitigate.

Development and security teams, software creators, and companies alike were hit once again with another vulnerability when news made its way online of a disclosure of a PoC for an unauthenticated zero…

April 4, 2022 Kendra Morton

Log4j: Come out, come out wherever you are!

On December 10th, 2021, a critical vulnerability was found in Log4j.  It impacts almost every organization which develops applications in Java, or that uses third-party software.  Vulnerabilities get …

March 11, 2022 Michael Lelchuk

Open Source: Trouble because of sudden license changes

Open Source does not mean that the use of the code is allowed without any restriction: The use is subject to conditions which are formulated by the author (copyright holder) in the form of a license. …

February 22, 2022 Kendra Morton

The story behind colors.js and faker.js

The bizarre case of the author who corrupted his own npm packages – colors.js and faker.js. Originally reported by Bleeping Computer on Jan 9th the author of npm packages colors.js and faker.js…

February 9, 2022 Marcus Lucero

The FTC’s warning to companies about the failure to protect against open source vulnerabilities

In direct response to the Log4j vulnerability, the United States Federal Trade Commission published an alert. Net? If your company does not take proactive steps to prepare for future vulnerabilities l…

February 4, 2022 Kendra Morton

Software supply-chain vulnerabilities: A close look on code

Vulnerabilities that affect the supply chain of software and its distribution are easily among the most terrifying experiences any company involved must endure. Such vulnerabilities typically affect a…

December 15, 2021 Lars Wiebusch

What you need to know about the Log4j security vulnerability

If you’re not scrambling to contain and fix this vulnerability, do so now. It’s a doozy folks! Every organization using third-party software or developing custom applications with the Java programming…

December 13, 2021 Kendra Morton

When is the right time to conduct an open source audit?

No matter what industry you are in, your company’s code most definitely contains code from someone else.  Today’s software is not written from scratch, but rather assembled from parts.  Th…

November 22, 2021 Michael Lelchuk

Field Notes: Understanding GPL Linking Exceptions

Notes from the Field: SCA Analysts and Code Insight Product Trainers talk Observations, Trends and Findings. I find the subject of GPL Linking Exceptions resurfacing often, whether I’m on a SBOM revie…

November 3, 2021 Marcus Lucero

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • …
  • 11
  • »

Top 10 Posts

  • What is Software Composition Analysis?
  • Open Source Software Licensing: Not everything is as it seems.
  • Let’s Talk Open Source Trends (A 2020 Early Look)
  • What’s Trending with SBOMs, Developers, and Code Scanning
  • Spring4Shell: Deep breath. Don’t panic. Mitigate.
  • Log4j: Come out, come out wherever you are!
  • Open Source: Trouble because of sudden license changes
  • The story behind colors.js and faker.js
  • The FTC’s warning to companies about the failure to protect against open source vulnerabilities
  • Software supply-chain vulnerabilities: A close look on code
  • What you need to know about the Log4j security vulnerability
  • When is the right time to conduct an open source audit?
  • Field Notes: Understanding GPL Linking Exceptions

Topics

  • Software Installation
  • Software Composition Analysis
  • Software Monetization

Tweets by Revenera

With the increase in the adoption of the cloud infrastructure and the increasing number of SaaS applications, Revenera’s #InstallShield, more than ever before, enables you to move your build infrastructure right to the cloud, seamlessly. Read more below:

https://www.revenera.com/blog/software-installation/build-your-next-software-installation-in-the-cloud/?utm_source=twitter&utm_medium=social

Image for the Tweet beginning: With the increase in the Twitter feed image.
Reply on Twitter 1529175592792428548 Retweet on Twitter 1529175592792428548 1 Like on Twitter 1529175592792428548 1 Twitter 1529175592792428548

Learn how to efficiently operate your SaaS, IoT, and software business with FlexNet. Click the link below to learn more about how this award-winning entitlement program can help you.

https://www.revenera.com/sites/default/files/datasheet-fno.pdf?utm_source=twitter&utm_medium=social

Reply on Twitter 1529130663386939400 Retweet on Twitter 1529130663386939400 1 Like on Twitter 1529130663386939400 0 Twitter 1529130663386939400

Are you looking for Open Source License Compliance? Revenera can help you manage your open source license obligations while protecting your intellectual property from legal risk and empowering your engineering teams with faster software development.

https://www.revenera.com/software-composition-analysis/business-solutions/open-source-license-compliance?utm_source=twitter&utm_medium=social

Reply on Twitter 1528813196789829634 Retweet on Twitter 1528813196789829634 0 Like on Twitter 1528813196789829634 4 Twitter 1528813196789829634

#SBOMs are becoming more mainstream, the developer role is evolving, and codebases are getting larger, and more complex. Read about these and the latest trends in software development and open source management by @arybak.

https://www.revenera.com/blog/software-composition-analysis/whats-trending-with-sboms-developers-and-code-scanning/?utm_source=twitter&utm_medium=social

Image for the Tweet beginning: #SBOMs are becoming more mainstream, Twitter feed image.
Reply on Twitter 1528782986832920576 Retweet on Twitter 1528782986832920576 1 Like on Twitter 1528782986832920576 3 Twitter 1528782986832920576

The software industry’s reliance on open source, an increase in OSS dependencies, and the frequency of newly reported security exploits spells the perfect storm for an increased need for supply chain security. Read the report below to learn more.

https://info.revenera.com/SCA-RPT-OSS-License-Compliance-2022?lead_source=Website%20Visitor&id=Revenera.com?utm_source=twitter&utm_medium=social

Image for the Tweet beginning: The software industry’s reliance on Twitter feed image.
Reply on Twitter 1528768186614693891 Retweet on Twitter 1528768186614693891 2 Like on Twitter 1528768186614693891 3 Twitter 1528768186614693891
LOAD MORE...
Search

Archive

Software Composition Analysis Tags

agpl    Apache    Apache Log4j    Apache Struts 2    Bootloader    CISA    color.js    Cybersecurity    faker.js    GitHub    GPL    GRUB2    Healthcare    IoT / Intelligent Devices    Java    Legal counsel    License Management    Linux    Log4j    Log4Shell    MIT License    NIST    node modules    npm    Nvidia    Open Source Audits    Open Source Compliance    Open Source Security    Open Source Software (OSS)    OpenChain    Oracle WebLogic    OSS Licenses    Patching    RCE    Remote Code Execution    SBOM    SCA    SCA Maturity Model    SDLC    shift left    software bill of materials    software dependencies    software developers    software development    software licenses    software supply chain    software vulnerability    Spring4Shell    third-party software    US Government    vulnerabilities    Windows   
About the Software Composition Analysis blog

A resource for developers, legal and security experts using and managing open source software. We encourage your feedback as we discuss trends and insights around open source security and license compliance. What is Software Composition Analysis?

Updates in your inbox

Give us your email and we’ll keep you in the loop

Revenera
  • +1.800.374.4353
  • Contact Us
  • Revenera Community
  • revenera.de
  • Twitter
  • LinkedIn
  • YouTube
  • Instagram

© 2022 Flexera Software. All Rights Reserved.

Install

  • Install
  • Products
  • Services & Training

Protect

  • Protect
  • Business Solutions
  • Products

Monetize

  • Monetize
  • Business Solutions
  • Products

Resources

  • All Resources
  • Blog
  • Case Studies
  • Datasheets
  • Demos & Trials
  • Videos
  • Webinars & Events
  • White Papers & Industry Reports

About Us

  • About Us
  • Leadership
  • Media/Press Center
  • Partners
  • Careers
  • Contact Us
  • Terms and Conditions
  • Privacy Policy
  • Revenera.com Sitemap
© 2022 Flexera Software. All rights reserved.    Terms and Conditions    Privacy Policy