Semgrep
semgrep or Semgrep CLI is a free open-source static code analysis tool developed by Return To Corporation (usually referred to as r2c) and open-source contributors. It has stable support for Go, Java, JavaScript, JSON, Python, and Ruby. It has experimental support for eleven other languages, as well as a language agnostic mode. The name is a combination of semantic and grep, referring to semgrep being a text search command-line utility that is aware of source code semantics. Services To complement semgrep, r2c provides a continuous integration service (called Semgrep CI) and maintains a rule library (called Semgrep Registry). Basic individual use of these services are offered for free while paid tiers cover team and commercial use-cases. Compared to other popular static application security testing (SAST) tools, Semgrep CI is the only one with an open source engine which is able to run on private codes for free. History Semgrep CLI was based on sgrep which was an ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
OCaml
OCaml ( , formerly Objective Caml) is a general-purpose, multi-paradigm programming language which extends the Caml dialect of ML with object-oriented features. OCaml was created in 1996 by Xavier Leroy, Jérôme Vouillon, Damien Doligez, Didier Rémy, Ascánder Suárez, and others. The OCaml toolchain includes an interactive top-level interpreter, a bytecode compiler, an optimizing native code compiler, a reversible debugger, and a package manager (OPAM). OCaml was initially developed in the context of automated theorem proving, and has an outsize presence in static analysis and formal methods software. Beyond these areas, it has found serious use in systems programming, web development, and financial engineering, among other application domains. The acronym ''CAML'' originally stood for ''Categorical Abstract Machine Language'', but OCaml omits this abstract machine. OCaml is a free and open-source software project managed and principally maintained by the Frenc ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Coccinelle (software)
Coccinelle (French for ''ladybug'') is an open-source utility for matching and transforming the source code of programs written in the C programming language. Utility Coccinelle was initially used to aid the evolution of the Linux kernel, providing support for changes to library application programming interfaces (APIs) such as renaming a function, adding a function argument whose value is somehow context-dependent, and reorganizing a data structure. It can also be used to find defective programming patterns in code (i.e., pieces of code that are erroneous with high probability such as possible NULL pointer dereference) without transforming them. Then ''coccinelles role is close to that of static analysis tools. Examples of such use are provided by the applications of the herodotos' tool, which keeps track of warnings generated by ''coccinelle''. Support for Coccinelle is provided by IRILL. Funding for the development has been provided by the Agence Nationale de la Reche ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Python Package Index
The Python Package Index, abbreviated as PyPI () and also known as the Cheese Shop (a reference to the ''Monty Python's Flying Circus'' sketch " Cheese Shop"), is the official third-party software repository for Python. It is analogous to the CPAN repository for Perl and to the CRAN repository for R. PyPI is run by the Python Software Foundation, a charity. Some package managers, including pip, use PyPI as the default source for packages and their dependencies. more than 350,000 Python packages can be accessed through PyPI. PyPI primarily hosts Python packages in the form of archives called (source distributions) or precompiled "wheels." PyPI as an index allows users to search for packages by keywords or by filters against their metadata, such as free software license or compatibility with POSIX. A single entry on PyPI is able to store, aside from just a package and its metadata, previous releases of the package, precompiled wheels (e.g. containing DLLs on Windows), ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Pip (package Manager)
Pip is a package-management system written in Python and is used to install and manage software packages. The Python Software Foundation recommends using pip for installing Python applications and its dependencies during deployment. Pip connects to an online repository of public packages, called the Python Package Index. Pip can be configured to connect to other package repositories (local or remote), provided that they comply to Python Enhancement Proposal 503. Most distributions of Python come with pip preinstalled. Python 2.7.9 and later (on the python2 series), and Python 3.4 and later include pip by default. History First introduced as pyinstall in 2008 by Ian Bicking (the creator of the virtualenv package) as an alternative to easy install, pip was chosen as the new name from one of several suggestions that the creator received on his blog post. According to Bicking himself, the name is a recursive acronym for "Pip Installs Packages". In 2011, the Python Pack ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Homebrew (package Manager)
Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's operating system, macOS, as well as Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility. Homebrew has been recommended for its ease of use as well as its integration into the command line interface. Homebrew is a non-profit project member of the Software Freedom Conservancy, and is run entirely by unpaid volunteers. Homebrew has made extensive use of GitHub to expand the support of several packages through user contributions. In 2010, Homebrew was the third-most- forked repository on GitHub. In 2012, Homebrew had the largest number of new contributors on GitHub. In 2013, Homebrew had both the largest number of contributors and issues closed of any ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
GitHub
GitHub, Inc. () is an Internet hosting service for software development and version control using Git. It provides the distributed version control of Git plus access control, bug tracking, software feature requests, task management, continuous integration, and wikis for every project. Headquartered in California, it has been a subsidiary of Microsoft since 2018. It is commonly used to host open source software development projects. As of June 2022, GitHub reported having over 83 million developers and more than 200 million repositories, including at least 28 million public repositories. It is the largest source code host . History GitHub.com Development of the GitHub.com platform began on October 19, 2007. The site was launched in April 2008 by Tom Preston-Werner, Chris Wanstrath, P. J. Hyett and Scott Chacon after it had been made available for a few months prior as a beta release. GitHub has an annual keynote called GitHub Universe. Org ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
OWASP
The Open Web Application Security Project (OWASP) is an online community that produces freely-available articles, methodologies, documentation, tools, and technologies in the field of web application security. The OWASP provides free and open resources. It is led by a non-profit called The OWASP Foundation. The OWASP Top 10 - 2021 is the published result of recent research based on comprehensive data compiled from over 40 partner organizations. History Mark Curphey started OWASP on September 9, 2001. Jeff Williams served as the volunteer Chair of OWASP from late 2003 until September 2011. , Matt Konda chaired the Board. The OWASP Foundation, a 501(c)(3) non-profit organization in the US established in 2004, supports the OWASP infrastructure and projects. Since 2011, OWASP is also registered as a non-profit organization in Belgium under the name of OWASP Europe VZW. Publications and resources * OWASP Top Ten: The "Top Ten", first published in 2003, is regularly updated. It ai ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Series A
A series A round (also known as series A financing or series A investment) is the name typically given to a company's first significant round of venture capital financing. The name refers to the class of preferred stock sold to investors in exchange for their investment. It is usually the first series of stock after the common stock and common stock options issued to company founders, employees, friends and family and angel investors. Series A rounds are traditionally a critical stage in the funding of new companies. Series A investors typically purchase 10% to 30% of the company. The capital raised during a series A is usually intended to capitalize the company for 6 months to 2 years as it develops its products, performs initial marketing and branding, hires its initial employees, and otherwise undertakes early stage business operations. It may be followed by more rounds ( Series B, Series C, etc). Sources of capital Because there are no public exchanges listing their secu ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Seed Round
Seed money, sometimes known as seed funding or seed capital, is a form of securities offering in which an investor invests capital in a startup company in exchange for an equity stake or convertible note stake in the company. The term ''seed'' suggests that this is a very early investment, meant to support the business until it can generate cash of its own (see cash flow), or until it is ready for further investments. Seed money options include friends and family funding, seed venture capital funds, angel funding, and crowdfunding. Usage Traditionally, companies that have yet to meet listing requirements or qualify for bank loans, recognize VC as providers of financial support and value added services. Seed money can be used to pay for preliminary operations such as market research and product development. Investors can be the founders themselves, using savings and loans. They can be family members and friends of the founders. Investors can also be outside angel investors, v ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Sequoia Capital
Sequoia Capital is an American venture capital firm. The firm is headquartered in Menlo Park, California, and specializes in seed stage, early stage, and growth stage investments in private companies across technology sectors. , Sequoia's total assets under management were approximately US$85 billion. Sequoia is an umbrella brand for three different venture entities: one focused on the U.S. and Europe, another on India and Southeast Asia, and a third on China. Notable successful investments by Sequoia Capital include Apple, Cisco, Google, Instagram, LinkedIn, PayPal, Reddit, Tumblr, WhatsApp, and Zoom. History Sequoia was founded by Don Valentine in 1972 in Menlo Park, California, at a time when the state’s venture capital industry was just beginning to develop. Sequoia formed its first venture capital fund in 1974, and was an early investor in Atari the next year. In 1978, Sequoia became one of the first investors in Apple. Partners Doug Leone and Michael Moritz assumed ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |
|
Redpoint Ventures
Redpoint Ventures is an American venture capital firm focused on investments in seed, early and growth-stage companies. History The firm was founded in 1999 and is headquartered in Menlo Park, California, with offices in San Francisco, Los Angeles, Beijing and Shanghai. The firm manages $3.8 billion of capital. The firm's partners include Allen Beasley, Jeff Brody, Jamie Davidson, Satish Dharmaraj, Tom Dyal, Tim Haley, Brad Jones, Chris Moore, Lars Pedersen, Scott Raney, Ryan Sarver, Tomasz Tunguz, John Walecka, Geoff Yang and David Yuan. The founders of Redpoint Ventures have been involved with successful investments including Foundry, Juniper Networks, Netflix and Right Media. Its partners have been involved in 136 IPOs and acquisitions. IPOs include Snowflake, Twilio, Pure Storage, 2u, Just Eat, Zendesk, HomeAway, Qihoo, Responsys, Fortinet and Calix. Acquisitions include Acompli, Caspida, Efficient Frontier, Heroku, RelateIQ, BlueKai, Posterous, Trip.com, LifeSize, Ref ... [...More Info...]       [...Related Items...]     OR:     [Wikipedia]   [Google]   [Baidu]   |