Tag

hex-pm

Safeguard articles tagged "hex-pm" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

Hex.pm package registry security and Elixir supply chain ...

Hex.pm blocks install-time scripts npm allows, but Elixir dependency risk still hides in native builds, Erlang CVEs, and thin registry-side vetting. Here's what to watch.

Feb 1, 20267 min read