Console’s review
· Reviewed by David Mytton
What we like
Install as a GitHub app to automatically scan your PRs as dependencies change, which are an increasingly common attack vector. Detects various issues such as malware injection, changed package behavior, new authors, data exfiltration, license issues etc. Can also run as a CLI or VS Code extension.
Tradeoffs
Only supports JS/TS & Python ecosystems. Go in private alpha and other languages on the roadmap.