A new feature in Apiiro’s Software Composition Analysis (SCA) is now in GA, offering visibility into unmanaged packages in your codebase. Unmanaged packages, like .jar, .dll, .war, and .ear artifacts, are manually added components not tracked by dependency managers, making updates and vulnerability monitoring more challenging.
Apiiro’s SCA now detects these bundled packages in your repositories, offering detailed insights and displaying them in your Inventory and risk pages:
Find specific package types like .jar, .dll, .war, and .ear in your Application or Repository Profile. Just go to Inventory > Components > Dependencies and use the search bar.
Use the new Explorer packageOrigin property to locate bundled packages across your organization.
On the SCA Risks page, get clearer insights into potential vulnerabilities with enhanced metadata and vulnerability data for your unmanaged packages.
In addition, we’ve also expanded our support matrix to include deps.json and pnpm.