Show HN: Minefield – Fast SBOM Management, 10k Packages Cached in 30s https://ift.tt/y4is1uY

Show HN: Minefield – Fast SBOM Management, 10k Packages Cached in 30s Hi HN! I’m Naveen, and I’d like to introduce Minefield, an open-source tool designed to simplify managing software bills of materials (SBOM) and identifying vulnerabilities in dependencies. It’s built to handle large-scale projects with speed and efficiency. Managing thousands of dependencies and ensuring they are vulnerability-free is daunting, especially in large software projects. Minefield tackles this challenge by providing fast, scalable SBOM management and dependency tracking. Key Features: •Caching Speed: Caches 10,000 SBOM packages’ transitive dependents in just 30 seconds. •Optimized Queries: Runs dependency and circular dependency queries in O(1) time using Roaring Bitmaps. •Highly Scalable: Designed to handle massive amounts of data efficiently with near-instant query times. Minefield stores relationship data using a direct node-to-node graph model and Roaring Bitmaps, ensuring minimal storage overhead and ultra-fast query speeds. This approach allows it to manage massive datasets efficiently without complex node-edge structures. You can check out the project here: https://ift.tt/pdu71vk . Read the project paper here for more technical details: https://ift.tt/4YPsMD9... I’d love to hear your feedback and ideas on how to improve Minefield! Feel free to open issues, submit PRs, or just leave a comment. https://ift.tt/pdu71vk September 6, 2024 at 05:26PM