About the Author

Nigel Brown

Staff Data Scientist

More posts by this author (1)

Historical provenance: Mapping Git tags to package versions to verify proof of origin for OSS packages

The importance of historical provenance in identifying malicious packages

Nigel Brown /

Jan 15, 2024

Open Source Security

Continue Reading

Don't be a stranger

Newsletter

Stay in the loop

Share your email address for updates.

Explore our GitHub repo

Let's collaborate on projects.

Explore Github

Dive into our Discord

We love feedback and ideas.

Join Discord Server

© 2025 Stacklok

Privacy Policy Terms of Service

Docs

CodeGate Stacklok Insight

Contact Us

hello@stacklok.com