Free browser tool checks EU CRA Article 14 compliance via dependency lockfiles

·1 views

A developer has released a free, browser-based tool at cra.toledotechnologies.com/check that lets users check software dependencies for EU Cyber Resilience Act Article 14 obligations by pasting common lockfiles or SBOMs. Under Article 14, enforceable from 11 September 2026, companies must notify their national CSIRT and ENISA within 24 hours if a vulnerability in their EU-market product is being actively exploited. The tool cross-references declared dependencies against the OSV.dev advisory database and CISA's Known Exploited Vulnerabilities catalogue, with all processing done locally in the browser and no file contents sent to the developer's servers. A companion GitHub Action, cra-watch, is also available for automated CI pipeline checks across twelve lockfile formats. The developer cautions that a KEV match does not automatically trigger a reporting obligation, and that reachability of the vulnerable code path remains a key factor under the European Commission's July 2026 guidance.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Docker Images vs Containers: Key Differences Every Beginner Should Know

Docker images and containers are related but distinct concepts that often confuse newcomers to the platform. An image is a read-only template stored once on disk, while a container is a live, running instance created from that image — similar to a class and an object in programming. Multiple containers can be launched from a single image simultaneously without duplicating files on disk, making Docker storage-efficient. Each container gets its own thin writable layer on top of the shared image, meaning changes in one container do not affect others. However, this writable layer is temporary and is deleted when the container is removed, so persistent data requires the use of Docker volumes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Fix 'Permission Denied' Error on Docker Daemon Socket in Linux

Linux users running Docker commands may encounter a 'permission denied' error when trying to connect to the Docker daemon socket at /var/run/docker.sock, because the socket is accessible only to root and members of the docker group. The permanent fix is to add your user account to the docker group using 'sudo usermod -aG docker $USER', after which Docker commands work without sudo. A new login session must be started for the group membership change to take effect, since existing shell sessions retain the old group list. A quick but temporary workaround is to prefix commands with sudo, though this is not recommended for regular use. Users should avoid the commonly suggested 'chmod 666' fix, as it exposes the Docker socket to all users and processes on the machine, creating a serious security risk.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Shares Step-by-Step Guide to Cleaning Messy HR Data Using PostgreSQL

A data practitioner published a detailed walkthrough on DEV Community demonstrating how to clean a corrupted HR dataset using PostgreSQL. The raw dataset contained spelling errors, missing values, and inconsistent data formats that made it unsuitable for business reporting. The process began by creating a staging table to preserve the original data before any modifications were made. Cleaning steps included standardizing column names to snake_case, removing prefixes from employee IDs, and deleting records with null or empty identifiers. The project aimed to transform unstructured HR records into an analysis-ready dataset accessible even to beginners in the data field.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ollama vs llama.cpp in 2026: Key Differences and When to Use Each

Ollama and llama.cpp are two popular ways to run large language models locally, but they serve different use cases rather than being direct competitors. Ollama functions as a managed service that wraps a patched version of llama.cpp, handling model storage, scheduling, and automatic loading with a simpler interface. Direct llama.cpp, by contrast, gives users granular control over GPU placement, KV cache settings, and runtime flags, making it better suited for advanced or production configurations. Ollama is generally recommended for users who want a quick, low-friction setup for local chat, coding assistants, or scripting tasks. Those who need fine-grained performance tuning, immediate access to new llama.cpp features, or native Prometheus metrics are better served by running llama-server directly.

0 comments Read more at DEV Community