ripley
DependencyCheck
ripley | DependencyCheck | |
---|---|---|
8 | 11 | |
294 | 5,891 | |
- | - | |
7.9 | 9.5 | |
about 1 month ago | 4 days ago | |
Clojure | Java | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ripley
-
A fully-regulated, API-driven bank, with Clojure
Not disagreeing, and it's only one aspect of Phoenix, but it might be of interest to someone reading that this LiveView-like Clojure library exists: https://github.com/tatut/ripley
Also this is a neat list of LiveView-like technologies across various languages: https://github.com/liveviews/liveviews
-
Any recommendations for a websoket library?
Ripley seems interesting: https://github.com/tatut/ripley https://dev.solita.fi/2020/06/01/rethinking-the-frontend.html
- LiveView in Clojure ?
- Is Clojure suitable for my use cases?
-
Clojure needs a Rails, but not for the reason you think
Maybe it's because Clojure has typically attracted a demographic who are more shy about self-promoting and marketing their new ideas and tools. Photon is an exciting (and relevant) example defying that trend though: https://www.hytradboi.com/2022/uis-are-streaming-dags
Also relevant as a Phoenix-like alternative for Clojure: https://github.com/tatut/ripley
-
Is there anything in Clojure comparable to Hotwire in Rails or Phoenix Live View in Elixir? I've had with SPA's.
I haven't seen https://github.com/tatut/ripley mentioned. Seems cool.
- GitHub - tatut/ripley: Ring live pages experiment
-
Avoid React complexities with Reagent/Reframe
Thanks for the refs! There’s also a recent CLJS attempt at this. And a good thread about trade-offs of this approach.
DependencyCheck
- OWASP dependency check (<9.0.0) could fail to work after Dec 15th, 2023
-
How To Secure Your JavaScript Applications
Use Security Tools: To identify known vulnerabilities in your project's dependencies, you can utilize commands like npm audit or employ third-party security scanners such as DependencyCheck or Dependabot. These tools thoroughly analyze the dependency tree and offer actionable insights to assist you in resolving any identified vulnerabilities.
-
Do you use dependency analysis and vulnerability detection tools?
OWASP DependencyCheck - a really decent tool for scanning your project for vulnerable dependencies. It is actively developed and updated and up to date with the most latest vulnerabilities. Sometimes it can be a pain in the ass, though. Some security researchers and such find a vulnerability, publish it and the next day our CI/CD pipelines fail (the dependency check build step prevents the code from going to production). And not always there is a fix available. So, some vulnerabilities have to be ignored, temporarily. Also, to be able to ignore a vulnerability one has to do a fast risk assessment. And that will require from him to read about the vulnerability and decide if it is safe to be ignored or some different workaround must be found.
-
The ultimate guide to Java Security Vulnerabilities (CVE)
The ultimate guide somehow fails to mention the best CVE checker: https://github.com/jeremylong/DependencyCheck
-
Is Clojure suitable for my use cases?
We run https://github.com/jeremylong/DependencyCheck over our dependency tree regularly, via this Clojure wrapper: https://github.com/clj-holmes/clj-watson which tells us the dependency tree path to each item that has a CVE and also the version in which the CVE is addressed, if known.
-
Gitlab community dependency scanning
We use OWASP dependency-check and pass reports to SonarQube.
-
Security in CICD / DevSecOps
From OWASP for those class of tools you could look into DependencyCheck and DependencyTrack
- Is there a tool to track CVEs for the software that we use?
-
Does anybody know any good materials for java defensive coding please?.
DependencyCheck is an open source tool that checks for vulnerabilities in dependencies used within a project. While it is a reactive tool, it's an important one since the code a developer writes is not the only code an application uses.
-
Are there any tools I can use to safely upgrade my Nuget packages? What are some strategies I can incorporate?
One more aspect to consider, although I know it is not the primary ask of the post, is to be sure and run something like dependency check on your repository. There are quite a few vulnerabilities being injected through the packaging process these days.
What are some alternatives?
cljs-todomvc - List of TodoMVC examples that use Clojurescript (om, om next, reagent, re-frame, rum, quiescent, etc.)
dependency-track - Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
helix - A simple, easy to use library for React development in ClojureScript.
SonarQube - Continuous Inspection
clojure-inertia-pingcrm-demo - PingCRM on Clojure - A Clojure/Script fullstack demo application to illustrate how Inertia.js works.
opencve - CVE Alerting Platform
leiningen - Moved to Codeberg; this is a convenience mirror
openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.
stripe-python - Python library for the Stripe API.
uml-reverse-mapper - Automatically generate class diagram from code. Supports Graphviz, PlantUML and Mermaid output formats.
liveview-clj
slsa - Supply-chain Levels for Software Artifacts