BlackDuck Alternatives

https://news.ycombinator.com/item?id=20159327
by luthien2 • 7 years ago
3 2 7 years ago

We use BlackDuck at work to scan our jar for open source components with weak licenses. Thing is, BlackDuck's scan tool takes too long (60+ min on a 400mb jar), and their support kinda sucks.

Anyone have recommendations on a better tool? I'm googling the competitors but would be interested to know what people's experiences were (as opposed to just reading the shiny marketing-speak)

Related Stories

Loading related stories...

Source preview

news.ycombinator.com