Observed arrival · 2026-10-12
MobS: Checking Software Dependencies Without Revealing Them
MobS is a research-led open-source project exploring how software users could verify dependency claims without receiving a vendor’s full component list.
- For
- Software buyers and suppliers managing dependency risk
- Worth noticing
- The site notes that proving a registered dependency claim does not prove the registered information matches the software actually shipped.
Field notes
The proposed workflow separates a supplier’s dependency claim from disclosure of the full dependency graph: a user would verify a proof against recorded information. The site traces the project to a paper whose listed authors include a MobS team member, and links to the publisher’s page. It also makes a material scope distinction: the proof would concern registered information, while confirming that the record matches the shipped software requires additional checks.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue