A Guide to Open Source Software
Learn more about how organizations can use open source software to innovate while minimizing risk ... Read More

SAST – All About Static Application Security Testing
Static Application Security Testing (SAST) is a central part of application security efforts, so let’s get into the whats and whys behind this technology ... Read More
Dependency Management: Protecting Your Code
Learn how to protect your application’s code with dependency management, and why automation is critical for effective dependency updates ... Read More
Dependency Management vs Dependency Updates: What’s the Difference?
Keeping dependencies up to date is a big part of dependency management, but it's not everything. Learn more about the differences between the two ... Read More
Hallucinated Packages, Malicious AI Models, and Insecure AI-Generated Code
Worried about attackers using AI models to write malicious code? Here are three other ways AI model use can lead to attacks ... Read More
Quick Guide to Popular AI Licenses
Not all "open" AI licenses are truly open source. Learn more about the most popular licenses on Hugging Face ... Read More
Threat Hunting 101: Five Common Threats to Look For
Learn more about supply chain threats and where to find them. The post Threat Hunting 101: Five Common Threats to Look For appeared first on Mend ... Read More
Responsible AI Licenses (RAIL): Here’s What You Need to Know
Learn about this family of licenses that seek to limit harmful use of AI models. The post Responsible AI Licenses (RAIL): Here’s What You Need to Know appeared first on Mend ... Read More
NVD Update: More Problems, More Letters, Some Questions Answered
We're not saying the NVD is dead but it's not looking good. The post NVD Update: More Problems, More Letters, Some Questions Answered appeared first on Mend ... Read More
How Do I Protect My AI Model?
AI models are valuable assets. How do you keep them safe? The post How Do I Protect My AI Model? appeared first on Mend ... Read More