Company
Date Published
Author
Eyal Ben Moshe and JFrog Community Team
Word count
637
Language
English
Hacker News points
None

Summary

JFrog has announced a new version of its extension for Visual Studio Code, aimed at enhancing security for Golang developers by integrating vulnerability information from the JFrog GoCenter directly into the IDE. This free extension allows developers to access live vulnerability data for every public Go Module used, helping them make informed decisions about dependencies before building their applications. GoCenter, a public GOPROXY, has grown into a comprehensive repository of around 700,000 immutable, versioned Go Modules, providing a browsable UI for developers to search and view metadata, usage statistics, and security information. The extension enables users to view both direct and indirect module dependencies, enhancing their security vigilance by making risks of open-source dependencies more visible. With the sunsetting of GoCenter's central repository on May 1, 2021, JFrog continues to promote the use of GoCenter as a GOPROXY, while also offering JFrog Xray to reveal risks across various package managers and ensure compliance with license policies.