Join us

ContentUpdates and recent posts about OWASP Dependency-Check..
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Tencent’s AI-powered programming tool fully automates app development

Tencent’s AI team rolled out a 24-hour, invite-only beta of CodeBuddy to50,000 devs. CodeBuddy flips chat into code via itsconversation-is-programmingIDE. Devs forge end-to-end apps with natural language. Trend to watch:Chat-based IDEs portend a shift to natural-language dev workflows... read more  

Tencent’s AI-powered programming tool fully automates app development
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Cursor makes developers less effective?

METRtapped 16 devs to squash 136 live bugs withCursor(Sonnet 3.5/3.7). They clocked 146 h. AI users zipped through code, but stalls, reviews, and IDE lag devoured their lead. One dev who logged 50+ hours withCursorunlocked a 38% speedup. That steep learning curve and costly context pivots wipe out g.. read more  

Cursor makes developers less effective?
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

To be a better programmer, write little proofs in your head

Developer sketchesproofsmid-code. This drives first-run correctness by leaning onmonotonicity,immutability,invariants, andpre/postconditions. They carve code into atomic steps. They erectfirewallsto contain impact zones. They wield induction for recursive logic—proof-affinity blooms. They drill form.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

TODOs aren’t for doing

Teams balk at trackingTODOcomments. Some funnel them into bug trackers. Others prune stale tags. The post saysTODOs stash edge-case insights, not tickets... read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Secrets Management Tools: The Complete 2025 Guide

Pulumi ESC corrals secrets from 20 + stores—Vault, AWS, Azure, GCP—into a singleYAML config-as-codeengine. It spawns dynamic short-lived credentials and locks every action behind a centralized audit log. Existing secret stores stay intact. Retrieval hitssub-secondspeeds. Envelope encryption shields .. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Alibaba Launches Qwen3-Coder AI Model for Agentic Programming Excellence

Alibaba unleashedQwen3-Coder, a480B-parameter MoE titan. It ignites35Bparameters per token to code, debug, and automate workflows. It spans256Ktokens of context—and can stretch to a million. It ships asQwen3-Coder-480B-A35B-Instructon Hugging Face and GitHub. It hooks intoQwen CodeCLI orClaude Code... read more  

Alibaba Launches Qwen3-Coder AI Model for Agentic Programming Excellence
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

OpenAI prepares to launch GPT-5 in August, The Verge reports

OpenAI set to launch GPT-5 in August, blending distinct models for versatile AI functionality. Watch for potential delays due to development hurdles or competitor announcements.Implication: OpenAI is shifting from "one model fits all" to a modular AI architecture. Expect future LLMs to act more like.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Automating Terraform Imports with Configuration Generation Using Claude Code

Terraform v1.5 debuts anexperimental flag,-generate-config-out. It grabs configs duringresource importand spits out raw HCL. Teams stash assets in animportblock, trigger the flag, then polish the generatedmain.tf. IaC onboarding feels like a sprint... read more  

Automating Terraform Imports with Configuration Generation Using Claude Code
Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

I Watched Gemini CLI Hallucinate and Delete My Files

The Gemini CLI on Windows bungled a failedmkdir. It flagged the error as success, then ranmovecommands. Files landed in a ghost folder and got overwritten. Data vanished. WindowsmkdirsetsERRORLEVELon failure.movetreats missing targets as rename directives. No exit-code checks. No read-after-write ve.. read more  

Link
@faun shared a link, 4 months, 1 week ago
FAUN.dev()

Amazon AI coding agent hacked to inject data wiping commands

A hacker slipped a wiper intoAmazon Qv1.84.0 via a dodgy GitHub pull. AWS revoked every key, nuked the rogue commit, then rolled outAmazon Q v1.85.0... read more  

Amazon AI coding agent hacked to inject data wiping commands
OWASP Dependency-Check is an open source Software Composition Analysis (SCA) tool that scans application dependencies to detect publicly disclosed vulnerabilities. It analyzes project manifests, package metadata, and binary artifacts, then matches them against multiple vulnerability databases, including the NVD. Dependency-Check supports Java, JavaScript, .NET, Python, Ruby, and many other ecosystems. Teams integrate it into CI pipelines, IDEs, and build systems to catch vulnerable libraries early and maintain secure software supply chains. As part of the OWASP foundation, it is widely trusted for transparent, vendor-neutral security scanning.