CASTHighlight
Visualize versions, security vulnerabilities (CVEs), license risk and compliance of Open Source repositories directly from forge websites (github, gitlab, npmjs...), maven, packagist, nuget, etc. Steps to use this extension: 1. Once installed, visit one of the supported repository urls (e.g., https://www.npmjs.com/package/swagger-ui) and click on the extension icon. 2. Login by using your CAST Highlight credentials or with a user token (SSO/SAML authentication is not supported) 3. See information on the repository such as vulnerabilities (CVEs), licenses, released versions, etc. Installation and usage instructions: https://doc.casthighlight.com/install-use-cast-highlight-sca-browser-extension/ CAST Highlight is a software intelligence product for rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Open Source risks, Resiliency, and Agility. It combines objective software insights with qualitative surveys for business context.