Google launches scanner to spot open-source vulnerabilities

Google said its OSV-Scanner connects to a vulnerability database, showing developers the code and dependencies that need to be patched.
Read more: Google launches scanner to spot open-source vulnerabilities