All Announcements Security Licensing OSS News SCA Developers Press

Dependency Heaven

Apr 10, 2025

Introducing FOSSA Binary Composition Analysis (BCA)

FOSSA's new Binary Composition Analysis (BCA) product enables organizations to mange security, license compliance, and SBOMs for binary files.

SBOMs in India: Analyzing CERT-In Guidelines

Feb 25, 2025

8 min

SBOMs in India: Analyzing CERT-In Guidelines

An analysis of the CERT-In guidelines for building and managing an SBOM program, recommended data fields, automation support, and best practices.

The Role of SBOMs in Managing DORA Compliance

Jan 23, 2025

7 min

The Role of SBOMs in Managing DORA Compliance

An exploration of the importance of SBOMs in complying with the EU's Digital Operational Resilience Act (DORA), focusing on software tracking and monitoring requirements for financial entities.

Latest Articles

Dec 19, 2024

4 min

Winter 2025 FOSSA Product Updates

Explore the new functionalities of FOSSA for managing SBOMs, vulnerabilities, and open source license compliance, including automated NOTICE file recreation and FDA compliance support.

FOSSA

Read Article

Dec 5, 2024

4 min

License Compliance, SBOM, and Vulnerability Management for Smaller Teams: FOSSA Business Tier

FOSSA introduces a new business tier tailored for smaller teams, offering flexible pricing and comprehensive features for SBOM, vulnerability management, and license compliance.

SBOM

Read Article

New Relic and FOSSA Upgrade Supply Chain Security with Connected Build-Time and Run-Time Vulnerability Management

Dec 2, 2024

4 min

New Relic and FOSSA Upgrade Supply Chain Security with Connected Build-Time and Run-Time Vulnerability Management

New integration between FOSSA and New Relic provides end-to-end visibility and actionable insights for developers to manage software supply chain security efficiently.

Security

Read Article

Nov 21, 2024

5 min

Introducing SBOM Policies in FOSSA

Learn about FOSSA's new SBOM policy feature that helps enforce SBOM standards for compliance and security.

SBOM

Read Article

Understanding CVSS: The Common Vulnerability Scoring System

Nov 8, 2024

9 min

Understanding CVSS: The Common Vulnerability Scoring System

An in-depth look at the Common Vulnerability Scoring System (CVSS), its evolution, scoring methods, and its importance in prioritizing vulnerabilities.

CVSS

Read Article

Oct 23, 2024

8 min

Fall 2024 Software Licensing Roundup

Explore the significant licensing stories of fall 2024, including Elastics return to open source, the new fair source licensing model, and the PearAI controversy.

Dependency Heaven

Introducing FOSSA Binary Composition Analysis (BCA)

SBOMs in India: Analyzing CERT-In Guidelines

The Role of SBOMs in Managing DORA Compliance

Latest Articles

Winter 2025 FOSSA Product Updates

License Compliance, SBOM, and Vulnerability Management for Smaller Teams: FOSSA Business Tier

New Relic and FOSSA Upgrade Supply Chain Security with Connected Build-Time and Run-Time Vulnerability Management

Introducing SBOM Policies in FOSSA

Understanding CVSS: The Common Vulnerability Scoring System

Fall 2024 Software Licensing Roundup

More Articles

A Proposal for the Future of SBOM Minimum Elements

Snippet Scanning, Explained

CUPS Vulnerabilities: Impact and Fixes

U.S. Army Announces New SBOM Requirements

SBOM Requirements in the EU’s CRA (Cyber Resilience Act)

4 Considerations for Effective SBOM Sharing

Actioning the Stakeholder-Specific Vulnerability Categorization (SSVC) Model

Automate Regulatory Compliance With FOSSA's New SBOM Management Add-On

FOSSA Acquires StackShare to Enhance Developer Tools Management and Security

Understanding SBOM Requirements in PCI DSS

Secure Open Source for All: FOSSA's Free Plan Just Got Better

Polyfill Supply Chain Attack: Details and Fixes

Using the CISA Kev Catalog

Defining SBOM Requirements for Software Suppliers

FOSSA Joins Forces with New Relic in the Secure Developer Alliance

How Sentry Manages Software License Compliance

SPDX 3.0 Is Released

What’s New in CycloneDX 1.6?

CVE-2024-3094: New Vulnerability Impacts XZ Utils

FOSSA Product Updates: Spring 2024

SBOM Formats Explained and Compared

Enhancing Risk Observability with FOSSA's Issue Overview Dashboard

Beyond Vulnerabilities: Understanding Package Health with FOSSA Quality

Complying with the FDA’s SBOM Requirements

Enable Global Visibility and Swift Remediation with Package Index

4 Takeaways from the ESF's OSS and SBOM Management Recommendations

Reduce Alert Fatigue with FOSSA’s Auto-Ignore Rules

Terrapin (CVE-2023-48795): New Attack Impacts the SSH Protocol

SCA vs. SAST: Comparing Security Tools

Dual-Licensing Models Explained, Featuring Heather Meeker

A Comprehensive Guide to Source-Available Software Licenses, Featuring Heather Meeker

Understanding and Using the EPSS Scoring System

Best Practices for Generating High-Quality SBOMs

Curl Vulnerabilities: Impact and Fixes (Curl 8.4.0)

5 Ways to Reduce GitHub Copilot Security and Legal Risks

SBOM Examples, Explained

Understanding and Using SPDX License Identifiers and License Expressions

Business Source License (BSL 1.1): Requirements, Provisions, and History

5 Ways an SBOM Can Strengthen Security

FOSSA Product Updates: August 2023

Direct Dependencies vs. Transitive Dependencies

Vulnerability Remediation Tactics

What’s New in CycloneDX 1.5?

VEX (Vulnerability Exploitability eXchange): Purpose and Use Cases

The FOSSA Podcast: Product Management from Startup to Enterprise

Generative AI and Software Development: Copyright Law and License Compliance

The FOSSA Podcast: Managing Engineering Projects

Heather Meeker on Open Source License Compliance Policies

Picking the Right FOSSA Deployment Model

The FOSSA Podcast: SCA Purchasing and Implementation Trends

A Framework for Evaluating SBOM Tools

The FOSSA Podcast: Structuring and Growing a Customer Success Team

Containers and Open Source License Compliance

The FOSSA Podcast: Early-Stage Technology Decisions and Regrets

2023 Open Source Management Trends, Predictions, and Observations

The FOSSA Podcast: Adopting Haskell into an Existing Codebase

How to Operationalize SBOMs Throughout the SDLC

Announcing Support for CycloneDX and SBOM Import

How to Use 1Password to Authenticate the FOSSA CLI

How Applause Makes Open Source Management Work for Developers

Complying with GPL v3’s User Product Clause

Managing OSS License Compliance Risks in Commercial Software Licensing Agreements, Featuring Jim Markwith

Announcing the GA of C and C++ Security and License Scanning

November 2022 FOSSA Product Updates

OpenSSL Vulnerability 2022: Details and Fixes

CVE-2022-42889 Text4Shell Vulnerability: Impact and Fixes

Open Source Licenses 101: Microsoft Public License (Ms-PL)

Analyzing the Securing Open Source Software Act