Risk modeling initiative aims to expose the 'hiddenness of knowledge' in the supply chain

As Google's collaborative project known as the Graph for Understanding Artifact Composition (GUAC) starts to gain steam, the firm is bolstering its investment in dependency mapping by supporting a new project on top of GUAC that is geared toward risk modeling.

dependency dev & devsecops google guac initiative investment knowledge mapping modeling project risk software supply chain security steam supply supply chain understanding