Vulnerabilities don’t show who controls your code. Contributor intelligence exposes hidden risks in open source supply chains.

The seven principles that anchor everything we do

Solo maintainer poses supply chain risk to more than 5,000 software packages, including container images in Node.js and Department of Defense systems

If your software and hardware is being used by the DoD, your organization will need to identify and remove any foreign influence sooner rather than

As concerns grow around geopolitical risks in open source, many teams are re-evaluating dependencies like easyjson. At Hunted Labs, we took action—mapping our exposure, investigating

Seeing the Whole Picture, from Developer to Deployment