Prioritize with Snyk’s Open Source Vulnerability Experience
Blog post from Snyk
Snyk has introduced a new default view in its user interface that organizes vulnerabilities by library dependencies rather than individual vulnerabilities, aiming to facilitate a more strategic approach to remediation. This enhancement allows development teams to evaluate the holistic impact of upgrading libraries, making it easier to conduct a cost/benefit analysis of potential upgrades and encouraging the resolution of more issues with less effort. The new view simplifies the process of understanding and customizing upgrades within pull requests (PRs) by providing clear visibility into which vulnerabilities are addressed by each update. This change is designed to improve prioritization and communication between application security (AppSec) teams and developers, enhancing the overall efficiency of vulnerability management. The update is available across all Snyk projects that use Maven, .NET, npm, Python, Ruby, and Yarn, and users are encouraged to experience the new feature by navigating to individual projects within their organizations.