Google's GUAC Open Source Tool Centralizes Software Security Metadata
Google announces GUAC, an open source tool to help organizations better understand software supply chains by centralizing build, security, and dependency metadata.
Purdue University Understanding Artifact Composition Technical Advisory Member Software Supply Chain Security Metadata Graph For Understanding Artifact Composition
Source: securityweek.com