OSS Inspector, a Software Composition Analysis Service from Revenera, Helps Streamline Open Source Security and Compliance
Revenera’s OSS Inspector plugin enables developers to assess open source software risks without leaving their integrated development environment
ITASCA, Ill., Sept. 04, 2024 (GLOBE NEWSWIRE) — Revenera, producer of leading solutions that help technology companies build better products, accelerate time-to-value, and monetize what matters, today announced the availability of OSS Inspector.
Revenera’s OSS Inspector is a comprehensive, time-efficient approach to open source software (OSS) management. The Revenera OSS Inspector plugin enables developers using IntelliJ IDEA, an integrated development environment (IDE), to examine, within the IDE itself, the licenses and security vulnerabilities associated with the OSS components used in the application code. Without leaving the IDE, developers can immediately assess security risks to determine whether they require further review and remediation.
OSS Inspector helps developers gain a complete understanding of the dependency tree before they introduce new components into code. By providing insights into open source components prior to check-in, OSS Inspector saves significant time and effort, avoiding costly issues later in the development cycle. As part of a comprehensive approach to software composition analysis (SCA), OSS Inspector also prevents the injection of components with copyleft licenses or security vulnerabilities, ensuring that code remains secure and compliant right from the start.
“More than 80 percent of software applications incorporate open source software, offering advantages such as adaptability, cost-effectiveness, and collaborative development. However, failure to address the associated challenges of OSS use, including security vulnerabilities, license compliance issues, and code quality, can lead to serious consequences, such as data breaches and compliance violations,” said Venkat Ram Donga, Product Management Director at Revenera. “Revenera’s OSS Inspector addresses these challenges by offering a comprehensive, proactive, and efficient approach to open source management. OSS Inspector enables developers to gain a complete understanding of their project’s OSS dependency tree, and helps prevent technical debt.”
Revenera’s OSS Inspector supports developers by providing:
- Comprehensive dependency analysis: OSS Inspector inspects Gradle projects for OSS components, presenting developers with a full dependency tree that includes detailed metadata, such as component name, version, license, and vulnerabilities.
- Seamless integration with IntelliJ IDEA: The OSS Inspector plugin is specifically designed for developers using IntelliJ IDEA for Java and Kotlin projects. It allows for in-IDE examination of OSS licenses and security vulnerabilities, enabling immediate assessment and remediation without leaving the development environment.
- Enhanced security and compliance: By providing insights into OSS components before check-in, OSS Inspector helps developers maintain secure and compliant code from the start. Key features include identification of components with copyleft licenses and vulnerabilities, as well as providing critical information such as PURL (Package URL), vulnerability ID, severity level, and CVSS score.
Revenera’s OSS Inspector is available free with Revenera SCA offering. For full product details about OSS Inspector, please visit: https://www.revenera.com/software-composition-analysis/products/oss-inspector.
Follow Revenera
About Revenera
Revenera helps product executives build better products, accelerate time to value, and monetize what matters. Revenera’s leading solutions help software and technology companies drive top-line revenue with modern software monetization, understand usage and compliance with software usage analytics, empower the use of open source with software composition analysis, and deliver an excellent user experience—for embedded, on-premises, cloud, and SaaS products. To learn more, visit www.revenera.com.
CONTACT: Media Contact Clement | Peterson PR on behalf of Revenera revenerapr@clementpeterson.com
