{"id":23652,"date":"2022-12-15T09:24:16","date_gmt":"2022-12-15T09:24:16","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/15\/google-debuts-osv-scanner-to-find-vulns-in-open-source-apps-the-register\/"},"modified":"2022-12-15T09:24:16","modified_gmt":"2022-12-15T09:24:16","slug":"google-debuts-osv-scanner-to-find-vulns-in-open-source-apps-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/15\/google-debuts-osv-scanner-to-find-vulns-in-open-source-apps-the-register\/","title":{"rendered":"Google debuts OSV-Scanner to find vulns in open source apps \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Google this week released OSV-Scanner \u2013 an open source vulnerability scanner linked to the OSV.dev database that debuted last year.<\/p>\n

Written in the Go programming language, OSV-Scanner<\/a> is designed to scan open source applications to assess the security of any incorporated dependencies \u2013 software libraries that get added to projects to provide pre-built functions so developers don’t have to recreate those functions on their own.<\/p>\n

Modern applications can have a lot of dependencies. For example, researchers from Mozilla and Concordia University in Canada recently created a single-page web application<\/a> with the React framework using the create-react-app command. The result was a project with seven runtime dependencies and nine development dependencies.<\/p>\n

\n