https://github.com/chains-project/dirty-waters - v0.80.0

First Full release - v0.80.0

After a lot of feedback gathered throughout the last few months, we are finally releasing a first full version, which should be working fine with all the main package managers we currently support.

Please give us feedback if you do use the tool!

A second full release should come in around a month.

- Python
Published by randomicecube about 1 year ago

https://github.com/chains-project/dirty-waters - v0.1.1

This release add one new feature: Check release tag accessibility of the dependencies

- Python
Published by Stamp9 over 1 year ago

https://github.com/chains-project/dirty-waters - v0.1.0

Dirty-Waters v0.1.0

Dirty-Waters is an automated tool for identifying software supply chain issues in wallet projects. This initial release focuses on analyzing JavaScript cryptocurrency wallet projects and provides the following features: 1. One version Analysis: Examines static data of all dependencies from package registry and source code repository. 2. Differential Analysis: Compares two versions of a project to highlight changes in the source code. 3. Comprehensive Reporting: Generates detailed markdown reports for both static and differential analyses.

Key capabilities: - Detects dependencies without source code links - Flags deprecated dependencies - Highlights dependencies sourced from forks - Detects dependencies without provenance - Identifies packages lacking version tags - Identify first-time author and merger in the source code repository

We welcome feedback and contributions to improve the tool's capabilities and expand its support for other ecosystems.

- Python
Published by Stamp9 over 1 year ago