Mend.io Blog

Discover how sometimes a vulnerability isn’t as big of a threat as you may think. Learn about effective vs ineffective vulnerabilities.

Reflect on the naughty and nice in the Open Source-verse in 2018 with the top vulnerabilities and cool projects.

Learn about the National Vulnerability Database (NVD), the largest database of known vulnerabilities. Find out how it differs from the CVE.

Automate CIRCLECI ORB updates with Renovate for low-risk, predictable versioning. Learn how to easily manage dependencies and stay up to date.

Learn how OWASP Dependency-Check helps secure open source components by identifying vulnerabilities. Discover its features, and more.

Learn about 5 female pioneers of software development we’re grateful for. From Ada Lovelace to Barbara Liskov.

Learn how to overcome 3 DevOps security challenges, and how to integrate security into the DevOps pipeline.

Learn how to automate GO module dependency updates to save time & ensure consistency with Renovate, an open-source tool.

Learn how to create an effective open source policy template with 3 key points to ensure compliance and enforcement.

Discover the top open source projects for junior developers to hone their coding skills. From Apache Commons to Google Guava, & more.

Equifax breach review reveals vulnerabilities in Apache Struts are still unpatched by many companies. Learn why remediation is crucial.

Learn how to use Renovate to keep your repositories up-to-date. Self-hosting instructions provided. Beta support available.

Discover the top 5 open source vulnerabilities that still haunt developers. Learn how to protect your applications from security threats.

DevOps and DevSecOps are a generation apart from each other, representing a natural evolution to the integration of automated security into the DevOps movement.

Explore the pros & cons of dual licensing for open source components. Learn how it works, its benefits, challenges, & compliance requirements.

Learn how to configure file matching with Renovate to keep Docker dependencies up-to-date in manifests.