A flaw or weakness in a system's design, implementation, or operation and management that could be exploited to violate the system's security policy
(trust, but verify)
Reads project's dependencies (mix.lock, mix.exs)
For each dependency:
$ mix hoplon.check
$ mix hoplon.diff <dependency>
$ mix hoplon.absolve <dependency> <comment>
David's project: nietaki/suffixer
library with a hidden exploit: nietaki/evil_left_pad
Agenda
deploy to heroku
mix hoplon.check
investigate corrupt libraries
add hoplon it to CI
Bonus ⬇