dependency-management
(5)
Kevin Wang and the small print inside your software
Before FOSSA, Kevin Wang made software licenses readable. Now its founder and chairman wants to make the work of maintaining borrowed code easier to finish.
Anaconda made Python easy. Now it sells peace of mind.
The company that helped millions get started with Python found its paying customer in a different room: the enterprise worried about what all that free software might bring through the door.
Flox wants your setup guide to become one command
PostHog had 16 setup steps and 14 caveats. Flox helped replace them with a shared environment - and is betting that the same discipline can travel from a developer’s laptop to an AI agent and into production.
Mend.io
Mend.io, formerly WhiteSource, is a Boston- and Tel Aviv-based application security company that helps development and security teams find and fix vulnerabilities in open source dependencies, custom code, and AI-generated code. Its platform spans software composition analysis (SCA), static and dynamic testing (SAST/DAST), API security, automated dependency updates via Renovate, and a growing suite of AI security tools. Serving more than 1,000 customers including a quarter of the Fortune 100, Mend.io emphasizes automated remediation - producing exact code fixes rather than long lists of alerts - to help teams reduce security debt without slowing delivery.
Sonatype
Sonatype is the software supply chain management company behind Nexus Repository and the maintainer of Maven Central, the world's largest repository of open source Java components. Founded in 2008 by core contributors to Apache Maven, it helps developers and enterprises find, manage, and secure the open source code that powers modern software - blocking malicious packages, enforcing policy, and generating software bills of materials (SBOMs) across the development lifecycle.