Glossary

The vocabulary of dependency security, without the jargon.

Eight short definitions, and what each one concretely changes for your projects.

Read with an AI .md version

  • SBOM

    The machine-readable list of the components in a piece of software.

  • SCA

    The analysis of a project's dependencies.

  • EPSS

    The likelihood that a vulnerability will be exploited.

  • CISA KEV

    The catalog of vulnerabilities actually being exploited.

  • CERT-FR

    ANSSI's advisories and alerts.

  • CycloneDX

    The security-oriented SBOM format.

  • SPDX

    The license-oriented SBOM format.

  • End of life

    When a language stops getting fixes.

See these concepts at work on your own projects.

Try it for 14 days