The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 15, 2025
Filed:
Nov. 18, 2024
Endor Labs Inc, Palo Alto, CA (US);
Georgios Apostolopoulos, San Jose, CA (US);
Philip Hamer, Palo Alto, CA (US);
Endor Labs Inc, Palo Alto, CA (US);
Abstract
A computer-implemented method, a non-transitory computer-readable media, and a server for identifying an update of a code dependency to use based on risk and benefit trade-offs are described. In some examples, a package is selected from a database and a set of dependencies associated with the package are determined from third-party libraries. A set of upgrade candidates for a particular dependency is determined. For an upgrade candidate, issues associated with upgrading the package to use the upgrade candidate are determined, a state of a dependency graph associated with upgrading are determined, diamond dependencies in the dependency graph are determined, a number of vulnerabilities and a severity of the vulnerabilities addressed by upgrading to the upgrade candidate are determined, and a risk-benefit score associated with each upgrade candidate is determined. Each of the upgrade candidates are prioritized based on the associated risk-benefit score to create prioritized upgrade candidates that are then provided to a software developer.