Post

PackageGuard 2.11 blocks packages that OSV lists as malware, whatever their risk score. It also ranks vulnerabilities with CISA KEV and EPSS exploit data. A new setting accepts a known vulnerability, with a reason. packageguard.org