For subscribers

Getting started

• Avoiding bad packages
• DevOps architecture
• Capabilities
• Maintainers: critical for software supply chain security

Data

• Vulnerabilities
• End-of-life software
• Licenses
• OpenSSF Scorecard
• NIST SSDF attestation
• Package recommendations
• See all 9 articles

Using our data APIs

• Answering common questions with Tidelift's data APIs
• Data APIs overview
• Evaluate package risk
• Get a vulnerability report
• Fix vulnerabilities
• Reduce application risk
• See all 8 articles

Storing and analyzing your data

• Software supply chain security strategy

Administration

• Single Sign-On (SSO)
• Project groups
• User roles and inviting new users

References

• Understanding the difference between data from Libraries.io and The Tidelift Subscription
• Tidelift CLI JSON alignment summary reference
• How to reinforce at-risk packages using Tidelift
• Glossary of terms
• API authentication and keys
• Data from partnered maintainers
• See all 8 articles