r2c blog — It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.

Based on the Semgrep engine, Semgrep Supply Chain finds reachable vulnerable dependencies in your code

Related Keywords

,Software Composition Analysis ,Semgrep Supply Chain ,Supply Chain ,Semgrep Supply ,Security ,Program Analysis ,Static Analysis ,Mast ,Hint ,Winter ,