“composition analysis is called SCAR. It's basically a…” — The Pragmatic Engineer at 24:32
“composition analysis is called SCAR. It's basically a technique where we look at manifest files, your list of dependencies, depending on the package manager you use, and then this list of dependencies is checked to a database of known security problems, right? Those are not the zero-level”
0:00
1:07:38