Understanding Similarities and Differences Between Software Composition Analysis Tools
Pranet Sharma, Zhenpeng Shi, Şevval Şimşek, David Starobinski, David Sastre Medina · IEEE Security & Privacy · 2024
Software composition analysis (SCA) plays a key role in ensuring supply chain security by helping identify known security vulnerabilities in open source libraries. We review several popular SCA tool, comparing their key functionalities based on a set of objective criteria.