GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities. This is achieved by adding the new Dependency Review GitHub ...

Microsoft is acquiring npm, a major JavaScript-developer platform, which it is planning to integrate with GitHub. Written by Mary Jo Foley, Senior Contributing Editor March 16, 2020 at 10:30 a.m ...