CycloneDX
PulseAugur coverage of CycloneDX — every cluster mentioning CycloneDX across labs, papers, and developer communities, ranked by signal.
2 day(s) with sentiment data
-
LLMs invent non-existent code packages, creating slopsquatting risk
A study by VDB has revealed that large language models like Claude, GPT, and Gemini are generating non-existent package names for software development tasks. These fabricated names, which sound plausible and mimic real …
-
Syft generates Software Bills of Materials from container images
Syft is a tool designed to generate Software Bills of Materials (SBOMs) from various sources including container images, filesystems, and archives. It supports industry-standard formats such as SPDX and CycloneDX, along…
-
AI autonomously ships code overnight, with human review post-facto
An individual developed a system where an AI, specifically Claude Code, could autonomously write and ship code overnight without direct human supervision. The AI was given a strict set of instructions, including a froze…
-
New research predicts multi-vulnerability attack chains using SBOM graphs
Researchers have developed a novel approach to predict multi-vulnerability attack chains within software supply chains by leveraging Software Bill of Materials (SBOM) data. This method treats SBOMs as dependency-constra…