Google's GUAC Open Source Tool Centralizes Software Security Metadata
Google announces GUAC, an open source tool to help organizations better understand software supply chains by centralizing build, security, and dependency metadata.
Source: securityweek.com