Skip to content

Commit

Permalink
Merge 365fcf1 into f1afe2a
Browse files Browse the repository at this point in the history
  • Loading branch information
alphkito committed Jun 6, 2017
2 parents f1afe2a + 365fcf1 commit 7444a24
Showing 1 changed file with 2 additions and 2 deletions.
Expand Up @@ -8,8 +8,8 @@ components are backdoored, outdated and cannot be trusted.

## Solution:

When checking if an repository can be trusted look to see if the source is stil maintained,
security bugs are being reported and mitigated, if the component is not end of life or depricated.
When checking if a repository can be trusted look to see if the source is still maintained,
security bugs are being reported and mitigated, if the component is not at the end of life or deprecated.

You can also scan the component in your SDLC through OWASP dependency checker to see if there are any
known CVEs for this component.

0 comments on commit 7444a24

Please sign in to comment.