How can an organization know if an open source project it builds with third-party libraries has known vulnerabilities? If the organization has its’ code on GitHub, there is an integrated alerting system, but understanding how to work with those alerts might not seem as obvious as you might think.

Read full article on Infosecurity