Hex
@hexpm
The package manager for the Erlang ecosystem
Joined August 2014
- Hex v2.5 adds three layers of supply chain defense: security advisories in your terminal on mix deps.get, a release-age cooldown that withholds new versions until they’ve aged, and organization policies for filtered dependency fetching.
- We just published the results of the Hex security audit hex.pm/blog/security-…. Thanks to @AlphaOmegaOSS for funding this work, and to @paraxialio and @zentrustsec for the thorough reviews. Finally big thanks to @maennchen_ for managing this effort.
