SourceSeer SCA IDE plugins bring open-source risk checks into development

SoftSafe Tech introduces its IDE plugin for developers using JetBrains, Eclipse, and Visual Studio Code. The plugin identifies third-party components and open-source libraries in code, helping R&D teams understand security risks related to these components during the development phase.

According to the product introduction, the plugin supports open-source component risk detection in various development environments. Developers can initiate scans within their IDEs, comparing identified component information with a security database to view vulnerability details, impact scope, and repair recommendations.

This workflow shifts component risk feedback earlier into the development phase, allowing developers to assess risks based on project dependencies rather than waiting for centralized audits or deliveries. Post-disposal actions still require consideration of business compatibility, test results, and team component management requirements.

The presentation also proposed the direction of continuing to combine AI capabilities with plugins. AI Auxiliary capacity and range of suitability should be based on the corresponding release version. The basic positioning of the SourceSeer SCA IDE plugin supports the risk identification and handling of third-party components in the development environment.