Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-08-15 · source-backed
The August 14 release adds runtime tracing for Go, JVM, Node.js, .NET, PHP, Lua and Dart on top of its static graph, plus argument taint propagation into a callee's sinks through parameter-sink summaries, pass-through return taint and closure-capture taint for the Python flow walk. GitHub 4,331 stars. The project also instituted a CI policy shipping security patches out-of-cadence with a mandatory release disclaimer, which is a governance detail worth copying.
Each link below shares sources, entities, or timing with this story.
.NET built by Microsoft / Shared entity: GitHub / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).
.NET built by Microsoft / Shared entities / Earlier coverage
Linked by a graph relationship (.NET built by Microsoft); both cover NET, Python; earlier NET coverage from 2026-08-09.
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub, NET, Python; earlier GitHub coverage from 2026-08-05.
.NET built by Microsoft / Shared entity: GitHub / Same source domain / Earlier coverage
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).
Linked by a graph relationship (.NET built by Microsoft); both cover GitHub; reported by the same outlet (github.com).