MEDIUMVulnerability
Global
How Maven Central Builds Trust Into Dependency Delivery
·Source: Sonatype (Maven/npm)
Updated:
Executive Summary
<img src="https://www.sonatype.com/hubfs/Maven%20Central%20-%20Trust.png" alt="Image with concentric centered hexagon shapes with the innermost containing the text "Maven Central"" class="hs-featured-image" style="width:aut
Analysis
When a development team adds a dependency, it is placing trust in more than a file.