Technical Due Diligence with Open Source Software

The Technical Due Diligence service from Source Code Control analyses the software applications in a number of key areas:

1. How well is the open source software supply chain currently managed
2. Perform Software Composition Analysis to produce a complete Software Bill of Materials (SBoM), giving a full list of open source software components and their attributes, such as licensing and security vulnerability status.
3. Software design and architecture reviews
4. Code quality assessments and complexity
   1.  Cyclomatic Complexity
   2. Maintainability
   3. Lines of source code
   4. Lines of executable code
   5. Class Coupling
5. Review Testing strategy
6. Peformance and load testing

From this we can work with you to:

• Assist developers with the appreciation and adoption of quality processes
• Introduce best practices – removing the common issues from business as usual
• Provide customers with confidence in the steps you have taken, providing a competitive advantage
• Continue to work with you in the background to monitor issues e.g. new security vulnerabilities or changing licensing terms
• Provide bespoke training on best practices
• Future architecture advise
• Provide software developer resource

Smoke Testing

We offer our customers an initial smoke test to understand how many vulnerabilities there are within their software.

For further information on Open Source Compliance, click here